Domain Trust relationships not added about adexplorersnapshot.py HOT 6 CLOSED

AD Explorer snapshots collect information from a single DC (and domain) only, so the information we get is limited.
You could run additional snapshots against different DCs of linked domains and load the information in BloodHound.

domain trust relationship in a multi domain environment. The data for this is definitely there. Would be great if this would be parsed in future releases.

We do parse domains/trusts available from the viewpoint of the DC you connect to (see here https://github.com/c3c/ADExplorerSnapshot.py/blob/main/adexpsnapshot/__init__.py#L644). In case links are missing, there might be an issue with the tool.

Note that AD Explorer only connects to LDAP, not the GC, so we unfortunately don't have data of other naming contexts.

from adexplorersnapshot.py.

Hi, thanks for your fast answers. Yes, the links are missing. The data is in the snapshot but not visualized in bloodhound. Tools Like adalanche for example are able to retrieve the data from the same snapshot

from adexplorersnapshot.py.

In that case, probably something that changed in the data format that BloodHound expects vs. what we output in the JSON file currently.

from adexplorersnapshot.py.

@c3c maybe this commit break trusts json file? BloodHoundAD/BloodHound@7d3c0fb

from adexplorersnapshot.py.