Ethical Hacking: Techniques, Tools, and Countermeasures, 4th Edition

Reporting

Passive reconnaissance, active reconnaissance, and enumeration can provide very detailed information about a target network. Nevertheless, each activity’s output has little value unless it is captured in a format that informs the subsequent phases. In other words, the value of each phase’s output depends on how output is captured, recorded, and analyzed when moving forward. One of the primary responsibilities of security professionals and attackers alike is to document findings to provide direction for future activities. Movement through the phases of the attack life cycle depends on building attack plans that have the highest likelihood of succeeding. To do that, each phase of information gathering should iteratively filter out more ...