# subat0mik/Misconfiguration-Manager

Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.

Repository: https://github.com/subat0mik/Misconfiguration-Manager
Canonical: https://ross.abutalabs.com/products/misconfiguration-manager
Homepage: https://misconfigurationmanager.com
Language: PowerShell
License: GPL-3.0
License Family: copyleft
Last push: 2026-08-19T20:03:10+00:00

## Health v2 (maintenance only)
Score: 71/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 98, release rhythm 35, longevity 73
- inputs: {"age_days": 1022, "days_push": 14, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1167, forks 117 (observed 2026-08-28T04:03:50.395770+00:00)

## What it is
A central knowledge base documenting known Microsoft Configuration Manager (SCCM/ConfigMgr) attack tradecraft along with defensive and hardening guidance. It includes a PowerShell auditing script (MisconfigurationManager.ps1) to detect risky SCCM configurations in an environment.

## Use cases
- audit sccm misconfigurations in my environment
- find sccm attack paths before attackers do
- harden microsoft configuration manager deployment
- learn sccm attack techniques and defenses
- remediate risky configmgr settings
- detect sccm privilege escalation vectors

## When to choose
- you administer or secure an SCCM/ConfigMgr environment and need actionable remediation guidance
- you want a free PowerShell script to enumerate known SCCM misconfigurations
- you are researching SCCM offensive or defensive tradecraft

## When to avoid
- you need a general-purpose vulnerability scanner for non-Microsoft infrastructure
- you do not use Microsoft Configuration Manager in your environment
- you need automated continuous monitoring rather than point-in-time auditing

## Facets
- artifact type: learning-resource
- maturity: active
- function: security, vulnerability-scanning, documentation
- domain: security, developer-tools, windows
- platform: windows, cli, self-hosted
- tags: sccm, configmgr, attack-techniques, hardening, powershell, knowledge-base, red-team, blue-team

## Member repositories
- subat0mik/Misconfiguration-Manager (main) score 71

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:50.395770+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:28:53.490983+00:00, confidence not recorded.
  - readme: https://github.com/subat0mik/Misconfiguration-Manager (fetched 2026-08-28T04:03:50.395770+00:00, sha d6f3acb3a811)
  - homepage: https://misconfigurationmanager.com (fetched 2026-08-29T12:35:01.055714+00:00, sha 51d220543fdc)
- Data as of 2026-08-30T08:39:29.467469+00:00.