ABSTRACT
206Collecting information about the target company from the Internet, sifting through trash cans, walking the halls, or talking to friends is considered passive information collection because there is minimal interaction with the target. During the reconnaissance phase the tester looks for information that is readily available, collecting data that can provide greater insights when combined, and setting the foundation for an allout attack.
