-: Welcome to Reconnaissance and Intelligence.
This is gonna be the second half
of our threat management course.
Now, when we talk about reconnaissance and intelligence,
this is the way that we're gonna gather information
to better understand the security landscape
and the threats that we're facing.
Some standards and laws,
such as the PCI-DSS,
which is used for credit card processing,
this is a standard,
are gonna require information gathering
from inside and outside of your network
through vulnerability scanning
and compliances performed quarterly,
semi-annually, or yearly.
In the case of PCI-DSS,
their standard requires it at least quarterly,
and at least one external scan yearly,
outside your organization.
Numerous tools and techniques are available
for conducting this discovery,
and we're gonna talk about that
as we go through this section
because there is just a ton of stuff out there,
from open source research
to using network scanners like Nmap,
to doing vulnerability assessments
using things like Qualys and Nessus scanners.
There's a lot to this
and so we're gonna cover this in
the next several lectures as we go through
on reconnaissance and intelligence.