> For the complete documentation index, see [llms.txt](https://red.infiltr8.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://red.infiltr8.io/redteam/recon.md).

# Reconnaissance

## Theory

Reconnaissance consists of techniques that involve adversaries actively or passively gathering information that can be used to support targeting. Such information may include details of the victim organization, infrastructure, or staff/personnel. This information can be leveraged by the adversary to aid in other phases of the adversary lifecycle, such as using gathered information to plan and execute Initial Access, to scope and prioritize post-compromise objectives, or to drive and lead further Reconnaissance efforts.

![The Unified Kill Chain - in phase](/files/FNiCykG30k371VHOdwj7)

## Resources

{% embed url="<https://attack.mitre.org/tactics/TA0043/>" %}

{% embed url="<https://www.unifiedkillchain.com/#thescience>" %}

{% embed url="<https://tryhackme.com/room/recon>" %}