Going Beyond the Forest
The previous sections have clearly demonstrated that
(as designed)
no real security boundary exists between domains
inside an Active Directory forest.
However, since Microsoft envisions a security boundary
between multiple forests,
in the next sections we’ll discuss interforest trust
and discuss both enumeration
and potential exploitation vectors.