Cover Tracks

Depending on the scope of the test, ensure that com promised systems may be accessed throughout the test.

Pentest scenarios based on an internal ‘attacker’, like a legitimate infrastructure user or visitor with

Pentest conducted through the Internet by an ‘attacker’ with no preliminary knowledge of your system

Build and configuration review testing uses an authenticated -- credential base access and scanning --