Reconnaissance: Nontechnical Data
Obtaining nontechnical data about a target is much simpler than you might expect. While it is one of the most critical steps in compromising a target organization, it is often the most overlooked. A successful reconnaissance journey starts in front of a search engine, but it does not stop there. This simple step will help you identify the areas of greatest opportunity by familiarizing you with key information about the target organization, including employees, locations, business units, partners, and more.
To start, identify and browse your target’s website and any websites associated with the target—for example, sister companies, blogs, partner sites, and so on. This information will give you the ...