Detecting Configuration Manager Attack Paths | SO-CON 2025

Detecting Configuration Manager Attack Paths | SO-CON 2025

Source: YouTube · SpecterOps · published May 6, 2025 · 31:30

Cloud Security
No ratings yet Log in to rate
Transcript Available
Description

The video introduces Josh Prager from Spectre Ops and provides a high-level overview of System Center Configuration Manager (SCCM), explaining its role in managing endpoints 0:03.

Key Takeaways:
• Josh Prager shares his professional background, including his tenure at Spectre Ops and prior service in the US Navy Red Team and threat hunting 0:05.
• The session focuses on Configuration Manager (SCCM), with the speaker noting the terms are often used interchangeably 0:30.
• SCCM is defined as a tool that enables sitewide configuration and control over various endpoint clients 0:33.

This introduction sets the stage for a deeper technical discussion on SCCM management and deployment strategies.

Sources:

  • 0:03 Video introduction and music
  • 0:05 Speaker introduction and professional history
  • 0:30 Topic introduction: Configuration Manager/SCCM
  • 0:33 Definition of SCCM capabilities

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 0.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

[Music] My name is Josh Prager. I'm a principal consultant here at Spectre Ops. I've been with the company for this is actually my sixth year uh with Spectre Ops. I'm prior to that. I was in the US Navy. Um started as a radioman, worked my up way up to the uh Navy Red Team. Um did that for a little bit and then I did a completely uh different shift and went into threat hunting with In-game. Um did that for a couple years and then jumped over to Spectre Ops. Okay. All right. So, what we're going to be talking about is Configuration Manager or SECM. You'll hear me talk about those names kind of like interchangeably uh quite a bit. Um just a real quick primer. All right. Uh SECM enables sitewide configuration and control of different endpoints. uh essentially all the different clients within …