---
id: 5901
title: "Transitive Trust and Breaking Trust Transitivity: AD Security 101"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/ad-security-research-breaking-trust-transitivity/"
published_at: "2023-03-14T13:00:24Z"
tags: ["active-directory", "privilege-escalation", "kerberos", "authentication", "research", "trusts"]
phying_url: "https://phying.com/item/5901"
lang: en
---

# Transitive Trust and Breaking Trust Transitivity: AD Security 101

## Summary

Kerberos tickets let attackers authenticate across external 'non-transitive' AD trusts and escalate privileges; Microsoft deems it by design, so avoiding external trusts is the only mitigation.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2023-03-14T13:00:24Z
- **Original:** https://www.semperis.com/blog/ad-security-research-breaking-trust-transitivity/
- **Phying News:** https://phying.com/item/5901