handle parentchild trusts for TGT delegation

BloodHoundAD · Oct 8, 2024 · a2edcf1 · a2edcf1
1 parent e6c7e71
commit a2edcf1
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/CommonLib/Processors/DomainTrustProcessor.cs b/src/CommonLib/Processors/DomainTrustProcessor.cs
@@ -86,7 +86,8 @@ public async IAsyncEnumerable<DomainTrust> EnumerateDomainTrusts(string domain)
 
                 trust.TGTDelegationEnabled = 
                     !attributes.HasFlag(TrustAttributes.QuarantinedDomain) &&
-                    attributes.HasFlag(TrustAttributes.CrossOrganizationEnableTGTDelegation);
+                    (attributes.HasFlag(TrustAttributes.WithinForest) ||
+                    attributes.HasFlag(TrustAttributes.CrossOrganizationEnableTGTDelegation));
 
                 trust.TrustType = TrustAttributesToType(attributes);