{"id":1873,"date":"2023-01-11T14:24:24","date_gmt":"2023-01-11T14:24:24","guid":{"rendered":"https:\/\/firmussec.com\/sg-dev\/dev\/?page_id=1873"},"modified":"2023-03-03T16:12:44","modified_gmt":"2023-03-03T08:12:44","slug":"intelligence-led-penetration-testing","status":"publish","type":"page","link":"https:\/\/firmussec.com\/sg\/our-services\/assessment\/intelligence-led-penetration-testing\/","title":{"rendered":"Intelligence Led Penetration Testing"},"content":{"rendered":"

Assessment<\/p>\n<\/div>

Strengthen Your Cyber Security with Our Intelligence Led Penetration Testing<\/h2><\/div><\/div><\/div>
<\/div>

Highly rely on the reconnaissance portion \/ the intelligence gathering which are also known as the digital footprints.<\/p>\n<\/div><\/div><\/div>

<\/span><\/div><\/div><\/div>

Traditional penetration testing has been conducted on organisations for years now. The objective of the assessment is very simple where by the organisation would have a scope for the testers to conduct a security assessment on and discover vulnerabilities. Later, the tester would give information about the vulnerabilities and ways to remediate them to the organisation for further action. The only disadvantage of this approach is that the scope is often determined by the organisation itself before they procure the service from the cyber security companies. Thus being said, the tester should only test the mentioned scope and not go out of scope as it would be called \u201cscope creep\u201d. There are two possibilities using this traditional approach where by: 1) the tester might identify the vulnerabilities in the scope mentioned, but they do not exploit them to identify their impact on the organisation as a whole, or 2) the exploit was performed once the tester identified the vulnerability, but they do not evaluate the business impact on the organisation as a whole.<\/p>\n

However, Intelligence Led Penetration Testing<\/a> Assessment can fill this gap as it will be tested according to certain questions, such as what, when, why, and how the threats will be exploited by the attacker if they supposedly want to attack the organization. As the name suggests, this approach to penetration testing would highly rely on the reconnaissance portion \/ the intelligence gathering, which are also known as the digital footprints. Most of the organisations nowadays have digital footprints on the Internet. This, knowingly or unknowingly, can be gathered by the attackers and curated to attack the organization. The advantage of intelligence led penetration testing is that the tester would collect as much information possible on the organisation based mainly but not only on their digital footprints and try to evaluate the risk attached to the information gathered. From there, the tester would craft and simulate possible attacks that an attacker could launch using that piece of information. At the end of the day, the tester would present the intelligence collected and its possible attacks to the organisation so they would know about the threats and plan their defense moving forward.<\/p>\n

The approach includes the following five (5) stages:<\/p>\n<\/div><\/div><\/div>

<\/i><\/div>

Intelligence Gathering<\/h3><\/div>
<\/div><\/div><\/div>
<\/i><\/div>

Analysis<\/h3><\/div>
<\/div><\/div><\/div>
<\/i><\/div>

Threat Assessment<\/h3><\/div>
<\/div><\/div><\/div>
<\/i><\/div>

Running Attack Simulations<\/h3><\/div>
<\/div><\/div><\/div>
<\/i><\/div>

Reporting<\/h3><\/div>
<\/div><\/div><\/div>
<\/div><\/div><\/div><\/div>
<\/i><\/div>

Intelligence Gathering<\/h3><\/div>
<\/div><\/div><\/div>
<\/i><\/div>

Analysis<\/h3><\/div>
<\/div><\/div><\/div>
<\/i><\/div>

Threat Assessment<\/h3><\/div>
<\/div><\/div><\/div>
<\/i><\/div>

Running Attack Simulations<\/h3><\/div>
<\/div><\/div><\/div>
<\/i><\/div>

Reporting<\/h3><\/div>
<\/div><\/div><\/div>
<\/div><\/div><\/div><\/div><\/div><\/div>
<\/div><\/div><\/div><\/div><\/div><\/div>
<\/div>

Explore Our Assessment Services<\/h3><\/div>

Let us help you make informed decisions and set your business up for success through our range of assessment services.<\/p>\n<\/div><\/div><\/div>

<\/i><\/div>

Network Penetration Testing<\/p><\/a><\/div><\/div><\/div>

<\/i><\/div>

Web Application Penetration Testing<\/p><\/a><\/div><\/div><\/div>

<\/i><\/div>

Incident Response (IR)<\/p><\/a><\/div><\/div><\/div>

<\/i><\/div>

Source Code Review<\/p><\/a><\/div><\/div><\/div>

<\/i><\/div>

Mobile Application Penetration Testing<\/p><\/a><\/div><\/div><\/div>

<\/i><\/div>

Security Configuration Review<\/p><\/a><\/div><\/div><\/div>

<\/i><\/div>

Social Engineering<\/p><\/a><\/div><\/div><\/div>

<\/i><\/div>

Wireless Penetration Testing<\/p><\/a><\/div><\/div><\/div>

<\/i><\/div>

Breach and Attack Simulation (BAS)<\/p><\/a><\/div><\/div><\/div>

<\/i><\/div>

Compromise Assessment<\/p><\/a><\/div><\/div><\/div>

<\/i><\/div>

Intelligence Led Penetration Testing<\/p><\/a><\/div><\/div><\/div>

<\/i><\/div>

Network Resiliency Assessment<\/p><\/a><\/div><\/div><\/div>

<\/i><\/div>

Red Teaming<\/p><\/a><\/div><\/div><\/div>

<\/div><\/div><\/div><\/div><\/div><\/div>\n

Talk To Us<\/h2><\/div>
<\/div>

Penetration testing, cyber security strategy, proof-of-value, or just some information? Our domain experts provide bespoke cyber security offerings to solve your digital transformation challenges.<\/p>\n<\/div>

Contact Us<\/span><\/a><\/div><\/div><\/div>