Active Directory Forest Theory
Up to this point, we have only discussed and worked with
Active Directory concepts that use a single domain.
In larger organizations and corporations,
the infrastructure is often split into multiple domains
but still managed by Active Directory.
When we perform penetration tests
against multi-domain infrastructures,
we must obviously assess the security posture of all domains.
Given the importance of this,
we'll spend the remainder of this module discussing,
enumerating, and exploiting design concepts for
multi-domain Active Directory implementations.