Drive reconnaissance missions to gather information associated with the target system in scope through various tools to know the target’s security structure, policies, systems, device specifications, configuration and restrictions.
Identify the zone of attack by pinpointing the weakest link. Plan the attack, choose the mode of delivery and sustain long term presence by leveraging recon intelligence to control outcomes.
Recognize security compromises and gain access to either the user or root accounts. Once done, progress to gain higher levels of access by containing other devices and systems.
Exercise advancement and stealth processes to determine deficiencies, alter configuration files and disable services or features, establish control privileges and move silently between devices and systems, modify logs and deflect security events.
The reporting phase of external and internal security assessment consists of aggregating the discovered and exploited vulnerabilities in a technical report that thoroughly describes risks, vulnerability descriptions, remediation steps, root cause categorization and remediation plans.
