Detections
Analytics
Dangerous Trust Relationships
high
Language:
Description
If an attacker gains access to a single Active Directory domain, they can easily expand their attack to the entire infrastructure if the relationships between domains and forests are not properly filtered.
Solution
Limit dangerous trust relations as much as possible and regularly review their existence if needed for functional reasons.