Good Fences Make Good Neighbors: New AD Trusts Attack Paths in BloodHound
specterops.io | blog
Summary
The ability of an attacker controlling one domain to compromise another through an Active Directory (AD) trust depends on the trust type and configuration. To better map these relationships and make it easier to identify cross-domain attack paths, we are replacing the TrustedBy edge in BloodHound with new trust edges. We are also improving the coverage of AD special identities and introducing modeling of the trust account attack to provide a more complete picture of attack paths across trusts.
- Published
- Collected
--- id: 9524 title: "Good Fences Make Good Neighbors: New AD Trusts Attack Paths in BloodHound" source_domain: specterops.io source_url: "https://specterops.io/blog/2025/06/25/good-fences-make-good-neighbors-new-ad-trusts-attack-paths-in-bloodhound/" published_at: "2025-06-25T09:30:00Z" phying_url: "https://phying.com/item/9524" lang: en --- # Good Fences Make Good Neighbors: New AD Trusts Attack Paths in BloodHound ## Summary The ability of an attacker controlling one domain to compromise another through an Active Directory (AD) trust depends on the trust type and configuration. To better map these relationships and make it easier to identify cross-domain attack paths, we are replacing the TrustedBy edge in BloodHound with new trust edges. We are also improving the coverage of AD special identities and introducing modeling of the trust account attack to provide a more complete picture of attack paths across trusts. ## Intelligence Metadata - **Sources:** specterops.io - **Published:** 2025-06-25T09:30:00Z - **Original:** https://specterops.io/blog/2025/06/25/good-fences-make-good-neighbors-new-ad-trusts-attack-paths-in-bloodhound/ - **Phying News:** https://phying.com/item/9524