Across Domains
#

Vertically moving from the immediate child to the direct parent of the domain, to escalate to Enterprise Admin can be done either by forging the Trust Key, or using the KRBTGT account of the child domain.