As the saying goes: You can't spell Pentest without "preparation"!
OSINT collection is an important (and perhaps under-appreciated) part of penetration testing. In this episode we talk to John Strand about OSINT's place in a pentesting toolkit, what pieces of OSINT don't belong in a final report as well as the Black Hills approach to training (spoiler alert: They suck at capitalism).
John Strand on Linked In: https://www.linkedin.com/in/john-strand-a1b4b62/
Black Hills Information Security: https://www.blackhillsinfosec.com/
Want to learn more about Open Source Intelligence?
Follow us on Twitter: @TraceLabs
Join our Slack Channel: https://tracelabs.org/slack
Learn how to get started with Trace Labs: https://www.youtube.com/watch?v=7OrI4MYv9i4
Learn about our Search Party CTFs: https://www.tracelabs.org/initiatives/search-party
Remember Everything You Learn from Podcasts
