Introducing ConfigManBearPig, a BloodHound OpenGraph Collector for SCCM

This post introduces ConfigManBearPig, a PowerShell OpenGraph collector that enumerates SCCM/ConfigMan topology, misconfigurations, and attack paths for ingestion into BloodHound. It details run-once and per-host collection phases (LDAP, DNS, DHCP, Remote Registry, MSSQL, AdminService, HTTP, SMB, etc.), how nodes/edges are constructed, example Cypher queries to find takeover/elevation/credential-exposure paths, and operational guidance for offensive testing and defensive remediation.