msdn link

The LSA_FOREST_TRUST_RECORD structure is used to communicate the type, creation time, and data for a forest trust record. The data is determined by the trust type as follows in the definition of the contained union.

 typedef struct _LSA_FOREST_TRUST_RECORD {
   unsigned long Flags;
   LSA_FOREST_TRUST_RECORD_TYPE ForestTrustType;
   LARGE_INTEGER Time;
   [switch_type(LSA_FOREST_TRUST_RECORD_TYPE), switch_is(ForestTrustType)] 
     union {
     [case(ForestTrustTopLevelName,ForestTrustTopLevelNameEx)] 
       LSA_UNICODE_STRING TopLevelName;
     [case(ForestTrustDomainInfo)] 
       LSA_FOREST_TRUST_DOMAIN_INFO DomainInfo;
     [case(ForestTrustScannerInfo)]
       LSA_FOREST_TRUST_SCANNER_INFO ScannerInfo;
     [default] LSA_FOREST_TRUST_BINARY_DATA Data;
   } ForestTrustData;
 } LSA_FOREST_TRUST_RECORD,
  *PLSA_FOREST_TRUST_RECORD;

Flags: Contains zero or more flags from LSA Trust Record Flags (section 2.2.1.5). See the Meaning column in the table of that section for related information.

ForestTrustType: This value is one of LSA_FOREST_TRUST_RECORD_TYPE.

Time: The date and time when this entry was created. It is a 64-bit value that represents the number of 100-nanosecond intervals since January 1, 1601, UTC.

ForestTrustData: An LSA_UNICODE_STRING, LSA_FOREST_TRUST_DOMAIN_INFO, or LSA_FOREST_TRUST_SCANNER_INFO structure, depending on the value of ForestTrustType as specified in the structure definition for LSA_FOREST_TRUST_RECORD.