Skip to main content

Domain Trusts

Built-in Tools/LOTL​

Import-Module activedirectory
Get-ADTrust -Filter * ## Enumerating Trust Relationships

## cmd.exe
netdom query /domain:rezydev.local trust
netdom query /domain:rezydev.local dc # Query Domain Controllers
netdom query /domain:rezydev.local workstation # Query Workstations & Servers

PowerView​

Get-DomainTrust
Get-DomainTrustMapping # Perform Domain Trust Mapping

Get-DomainUser -Domain USA.REZYDEV.LOCAL | select SamAccountName
tip

BloodHound can also be used for enumerating Trusts using Map Domain Trusts pre-built query.