Forest write-up by limbernie

Thx for the writeup! I could’nt get root in time :frowning: All the time i missed to add the User to the “Exchange Trusted Subsystem Group”. But why is it necessary?. I would think adding him to “Exchange Windows Permissions” should be fine while looking at the BloodHound Graph? you know why it’s necessary? :slight_smile: