SharpSCCM Indicators
Detects the use of SharpSCCM, a post-exploitation tool designed to abuse Microsoft System Center Configuration Manager (SCCM) for lateral movement and privilege escalation. Its execution may indicate adversarial attempts to leverage enterprise management infrastructure for discovery, remote execution, or privilege escalation.
YARA-L
