Cover Tracks

Depending on the scope of the test, ensure that com promised systems may be accessed throughout the test.

Pentest scenarios based on an internal ‘attacker’, like a legitimate infrastructure user or visitor with

Build and configuration review testing uses an authenticated -- credential base access and scanning --

In passive Recon, Pentest team attempt to gather information from sources of Open Source Intelligence