System Center Configuration Manager (SCCM)

Configuration Manager application deployments can direct a configured application to a device collection; a Required deployment installs the application on managed clients according to its schedule. Adversaries with deployment-capable access can abuse this management plane to execute software on endpoints and move laterally (ATT&CK T1072). Creating a deployment does not itself prove that a client received or installed the application.