Domain Trust Discovery
Adversaries may attempt to gather information on domain trust relationships that may be used to identify lateral movement opportunities in Windows multi-domain/forest environments. Domain trusts provide a mechanism for a domain to allow access to resources based on the authentication procedures of another domain.(Citation: Microsoft Trusts) Domain trusts allow the users of the trusted domain to access resources in the trusting domain. The information discovered may help the adversary conduct [SI...
BY SOURCE
PROCEDURES (24)
Auto-extracted: 7 detections for process creation monitoring
Auto-extracted: 3 detections for general monitoring
Auto-extracted: 3 detections for lateral
Auto-extracted: 2 detections for script block
Auto-extracted: 2 detections for spray
Auto-extracted: 2 detections for powershell
Auto-extracted: 2 detections for powershell
Auto-extracted: 1 detections for azure
Auto-extracted: 1 detections for lateral
Auto-extracted: 1 detections for lateral
Auto-extracted: 1 detections for remote
Auto-extracted: 1 detections for powershell
Auto-extracted: 1 detections for credential
Auto-extracted: 1 detections for service
Auto-extracted: 1 detections for privilege
Auto-extracted: 1 detections for remote
Auto-extracted: 1 detections for service
Auto-extracted: 1 detections for credential
Auto-extracted: 1 detections for service monitoring
Auto-extracted: 1 detections for spray
Auto-extracted: 1 detections for file monitoring
Auto-extracted: 1 detections for cloud monitoring
Auto-extracted: 1 detections for lateral
Auto-extracted: 1 detections for azure