Security Boundaries within an Active Directory Forest | SO-CON 2025

Presented by Jonas Bülow Knudsen. For those in AD security, the phrase "the domain is not a security boundary; the forest is" is well-known. But does this mean no security boundaries exist within a forest, allowing all users full control of everything? That cannot be right. So, where are the boundaries in a multi-domain forest? Slides: https://github.com/SpecterOps/presentations/tree/main/SO-CON%202025/Jonas%20B%C3%BClow%20Knudsen%20-%20Security%20Boundaries%20within%20an%20Active%20Directory%20Forest SO-CON: https://specterops.io/so-con This talk was recorded on Monday, March 31, 2025 at SO-CON 2025.