Glossary: Governance, Risk and Compliance

reconnaissance

Also written: passive reconnaissance, active reconnaissance

Gathering information about a target at the start of a penetration test. Passive reconnaissance uses only public sources; active reconnaissance scans the systems.