Printer Bug and Forest Trust attack detection in AATP?

[Tristan Watkins]

Is the "printer bug" and the fairly recent unconstrained delegation accross forest trusts attack detectable by Azure ATP? https://posts.specterops.io/hunting-in-active-directory-unconstrained-delegation-forests-trusts-71f2...

[#2]

Hi Tristan, currently we are not detecting it in Azure ATP. We are looking at it and in delegation scenarios in general, will update.