subat0mik / Misconfiguration-Manager

Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.
https://misconfigurationmanager.com
GNU General Public License v3.0
710 stars 73 forks source link

Update Detect-4 to include relevant message ID's and SQL query to retrieve from DB #37

Open NocteDefensor opened 1 month ago

NocteDefensor commented 1 month ago

This PR updates the Detect-4 page to add relevant message ID's which can be used to monitor application deployment and deletion. Additionally, it includes a sample SQL query to retrieve these message types from the SCCM MSSQL DB.