decrypt
Description
Decrypt provided encrypted blob using the site server’s encryption capabilities.Usage
Example
This command decrypts encrypted data blobs found within SCCM. Provide the encrypted blob as a parameter to decrypt it using the site server’s keys.
decryptEx
Description
Decrypt provided blob with a specific session key for enhanced decryption capabilities.Usage
Example
Use this command when you have both an encrypted blob and its corresponding session key. This provides more control over the decryption process.
get_azurecreds
Description
Extract Azure application credential blobs from the SCCM database.Usage
Example
This command retrieves Azure application credentials that may be stored within SCCM for cloud integration features.
get_azuretenant
Description
Get Azure Tenant information configured within SCCM.Usage
Example
Retrieves Azure tenant configuration details that SCCM uses for cloud services integration.
get_creds
Description
Extract encrypted credential blobs from the SCCM database.Usage
Example
This command searches for and retrieves encrypted credential blobs stored in the SCCM database. These may include service account credentials, application passwords, and other sensitive data.
get_forestkey
Description
Extract forest discovery session key blobs from SCCM.Usage
Example
Retrieves session keys used for Active Directory forest discovery processes. These keys may be useful for accessing other domain resources.
get_pxepassword
Description
Extract PXE boot encrypted credential blobs.Usage
Example
This command extracts encrypted credentials used for PXE boot processes. PXE passwords are often used to secure network boot environments.