Practical Social Engineering

B Reporting Template

Use this template as a means to write a professional OSINT or social engineering report. Feel free to add or omit sections, although I recommend trying to stay as close to this as you can. Obviously, include phishing or vishing only if you are doing it as part of the engagement.

<DATE>

Introduction

<Client Name> contracted <you or your business> to perform an information security testing engagement to include <include all that are relevant> phishing, vishing, dumpster diving, open source intelligence gathering, baiting, physical security testing, and <other in-scope tests>. The performance dates were <start date> to ...