We know from our Hunting with Blood Hound that there is one another Domain/forest in the network called cyber.local.
We now need to figure out he ip range of that network and from where it is accessible. The starting point is form the m3dc.
From the rdp web browser history we get the ip 10.9.15.11
The site running on 10.9.15.11 is a drupal website which talks about how we can access the machines using PKI.
We need to perform necessary change to DNS records. For this lab the mentioned IP was not working so we had to change the dns ips to their respective internal dns ips.