task1

In one to two pages, identify the specific passive and active methods you would use to gather key information about Haverbrook Investment Group as part of structured and ordered methodology. Provide one to two references in your plan.

As you are developing the Reconnaissance Plan, keep these questions in mind:

As a malicious actor, how would you engage in a targeted attack against Haverbrook Investment Group while conducting passive reconnaissance techniques?

What techniques would you use for footprinting?

How would you identify and explain the company's presence on the internet?

How would you find the company's IP address range? How would you find the employees' personally identifiable information (PII), such as email addresses and phone numbers?

What potential effects would your penetration testing techniques have on the confidentiality, integrity, and availability of the company's private data as well as its networked systems?

Use the Reconnaissance Plan and Scanning Plan Template to record your work. You will submit this Reconnaissance Plan, along with a Scanning Plan, in Week 3.

Outline and discuss specific use cases to discover and enumerate information that could be used for potential exploitation. Some examples of information that you are gathering from Haverbrook Investment Group's systems are usernames, machine names, shares, and services from a system. Identify any software, applications, or scripts that will be needed and provide a description of how this software will be used to gather information about Haverbrook's systems.

As you are developing the Scanning Plan, keep these questions in mind:

How would you detect active systems?

How would you determine the best attack vector you wish to exploit?

How would you prioritize different targets of opportunity?

What tools would you be using for scanning and enumeration of systems and vulnerabilities?

Be sure to identify any needed software and provide a description of how it will be used to gather information about the systems.

Use the template from last week to finish your deliverable.