166 terms · 75/46/45
Technique № 025 · class: discovery

Reconnaissance

Reconnaissance involves the systematic gathering of information about the target environment, both externally before the attack and internally after compromise. The goal is to understand the topology, identify targets, and plan the next stages.

Term

description · examples · notes

Reconnaissance involves the systematic gathering of information about the target environment, both externally before the attack and internally after compromise. The goal is to understand the topology, identify targets, and plan the next stages.

Description

External reconnaissance includes searching publicly available information, port scanning, and service identification. Internal reconnaissance encompasses network mapping, user and group enumeration, and shared resource discovery.

Examples

  • Scanning the network to identify active systems and open ports
  • Enumerating users and groups in a domain environment after compromising one workstation
  • Gathering publicly available employee information through social media

Notes

  • Monitoring unusual scanning and directory service queries can indicate reconnaissance activity.

Mentioned in the news

tags
reconnaissance initial access
◳Composite

Threats

used by 5

Threats that use it. Select one to open its page.

Defenses

countered by 12

How it is countered. Select one to open its page.