RED TEAM GOLD: EXTRACTING CREDENTIALS FROM MDT SHARES

Summary from the TLDR InfoSec newsletter

While SCCM gets security attention, Microsoft Deployment Toolkit (MDT) often exposes similar vulnerabilities. Misconfigured MDT deployment shares frequently allow unauthorized access to credentials stored in configuration files, task sequences, and scripts. These credentials can potentially grant domain admin access or control over deployed systems.