Domain Trust Modification

An adversary with sufficient authority may add an Active Directory domain trust or change properties of an existing trust to alter cross-domain or cross-forest authentication and authorization. For example, enabling SID history on a supported outbound forest trust allows migrated users from the trusted forest to use their SID history when accessing resources. The effect depends on trust direction, configuration, and authorization at the target; trust modification can be used to evade defenses or elevate privileges.