CCM.exe (SCCM)

2023-09-13 by mttaggart

Windows Config Manager CCM.exe runs b64-encoded powershell.

The commands can be large enough to take multiple Event 4104 entries.

Documentation