Duane Michael
Duane Michael
Added the SCCM command to the machinetriage wrapper. Also significantly cleaned up the SCCM command's output.
The `blob` command fails when passed a `{GUID}:SHA1` string. If the same key-value pair is passed in a file with the `/mkfile` flag, it works as expected.
biskopp3n on the BloodHound Slack found a new CRED technique involving the deobfuscation of the `MEP_MachineVariables` table on the site database server. https://bloodhoundhq.slack.com/archives/C03N78QCRKJ/p1710329409609879
**Is your feature request related to a problem? Please describe.** It may be possible to retrieve a computer account's NT hash in situations where it is not possible to add...