Intelligence Gathering
Alissa Knight · 2020
This chapter discusses the intelligence gathering process, which is not simply port scanning and collecting service banners to find versions of running applications. Intelligence collection can also be passive and semi-passive open source intelligence collection, in which research is conducted online where a single packet never even hits the wire to the target. Reconnaissance is a pivotal step in performing intelligence gathering of a target host, network, web application, or connected product prior to actual exploitation. There are two separate approaches to performing reconnaissance: passive and active. Passive reconnaissance involves passively sniffing for data passing over the in-vehicle network. Having a complete and exhaustive asset catalogue of the target is important, especially in the risk assessment phase where relationships among critical assets, threats to those assets, and vulnerabilities that can expose assets to threats must be considered.