500
Collecting information without the target knowing it. This phase of penetration testing includes physical observation, dumpster diving, eavesdropping on employee conversations, searching the Web, posing as an employee, and packet sniffing.
What is passive reconnaissance?