Glossary: Vulnerability, Asset and Change Management

Passive reconnaissance

Also written: passive recon

Gathering information only from public sources, such as DNS, websites, job ads, repositories and certificate transparency logs, without ever touching the target's systems.