: SCCM attacks have seen a resurgence in the security community as researchers uncover new ways to abuse its site database and client-server communication.

In GOAD (or similar AD lab), the attack chain is:

: The Microsoft Endpoint Configuration Manager primary site server.