Child domain → forest root TL;DR: krbtgt + SID-history trick across a transitive trust — full forest from a child DA. Stub — to be filled in. What it is TODO Preconditions / where it applies TODO Technique TODO Detection and defence TODO References TODO