Record · corpus.blog/posts/01a08788-95a7-7029-88cb-9ffb811a68cd

Checking for Symantec Account Connectivity Credentials (ACCs) with PrivescCheck

itm4n.github.io · published 10 June 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at itm4n.github.io Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 8
Words captured: 4,311

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://www.mdsec.co.uk/

mdsec.co.uk

https://www.mdsec.co.uk/2024/12/extracting-account-connectivity-credentials-accs-from-symantec-management-agent-aka-altiris/

mdsec.co.uk

https://twitter.com/breakfix

twitter.com

https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/it-management-suite/ITMS/Administration/Configuring-Notification-Server/configuring-notification-server-settings-v15701619-d846e35732/notification-server-processing-settings-v11802974-d846e35883.html

techdocs.broadcom.com

https://knowledge.broadcom.com/external/article/194234/how-to-setup-agent-connectivity-credenti.html

knowledge.broadcom.com

https://github.com/mdsecactivebreach/evilaltiris/

github.com

https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/it-management-suite/ITMS/Release-Notes/IT-Management-Suite-8-8-Release-Notes/whats-new-in-this-release-itms-8-8.html

techdocs.broadcom.com

https://attack.mitre.org/techniques/T1552/006/

attack.mitre.org

Elsewhere on itm4n.github.io (24)

https://itm4n.github.io/assets/posts/2025-06-11-checking-symantec-account-credentials-privesccheck/diagram-architecture.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2025-06-11-checking-symantec-account-credentials-privesccheck/diagram-agent-enrollment.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2025-06-11-checking-symantec-account-credentials-privesccheck/symantec-management-agent-installed-and-registered.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2025-06-11-checking-symantec-account-credentials-privesccheck/evilaltiris-high-getmachineguid.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2025-06-11-checking-symantec-account-credentials-privesccheck/evilaltiris-high-machinetypeguid.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2025-06-11-checking-symantec-account-credentials-privesccheck/evilaltiris-high-getclientpolicies.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2025-06-11-checking-symantec-account-credentials-privesccheck/evilaltiris-high-decrypt-error-module.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2025-06-11-checking-symantec-account-credentials-privesccheck/evilaltiris-high-decrypt-access-denied.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2025-06-11-checking-symantec-account-credentials-privesccheck/evilaltiris-low-getmachineguid.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2025-06-11-checking-symantec-account-credentials-privesccheck/evilaltiris-low-generatekeys.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2025-06-11-checking-symantec-account-credentials-privesccheck/evilaltiris-low-setpublickeys.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2025-06-11-checking-symantec-account-credentials-privesccheck/evilaltiris-low-typeguid.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2025-06-11-checking-symantec-account-credentials-privesccheck/evilaltiris-low-getclientpolicies.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2025-06-11-checking-symantec-account-credentials-privesccheck/evilaltiris-low-decryptpolicies.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2025-06-11-checking-symantec-account-credentials-privesccheck/evilaltiris-low-decryptacc-fail.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2025-06-11-checking-symantec-account-credentials-privesccheck/notification-server-keys.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2025-06-11-checking-symantec-account-credentials-privesccheck/notification-server-exposable-key.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2025-06-11-checking-symantec-account-credentials-privesccheck/acc-decryption-attempt-1.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2025-06-11-checking-symantec-account-credentials-privesccheck/acc-decryption-attempt-2.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2025-06-11-checking-symantec-account-credentials-privesccheck/registry_agent_info.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2025-06-11-checking-symantec-account-credentials-privesccheck/registry_server_info.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2025-06-11-checking-symantec-account-credentials-privesccheck/inventory-file-type-guid.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2025-06-11-checking-symantec-account-credentials-privesccheck/client-policy-file-accs.png

itm4n.github.io

https://itm4n.github.io/assets/posts/2025-06-11-checking-symantec-account-credentials-privesccheck/privesccheck-acc-check.png

itm4n.github.io