Episode 10. - OSINT in Pentesting with John Strand

As the saying goes: You can't spell Pentest without "preparation"!

OSINT collection is an important (and perhaps under-appreciated) part of penetration testing. In this episode we talk to John Strand about OSINT's place in a pentesting toolkit, what pieces of OSINT don't belong in a final report as well as the Black Hills approach to training (spoiler alert: They suck at capitalism).

John Strand on Linked In: https://www.linkedin.com/in/john-strand-a1b4b62/

Black Hills Information Security: https://www.blackhillsinfosec.com/

Want to learn more about Open Source Intelligence?

Follow us on Twitter: @TraceLabs

Join our Slack Channel: https://tracelabs.org/slack

Learn how to get started with Trace Labs: https://www.youtube.com/watch?v=7OrI4MYv9i4

Learn about our Search Party CTFs: https://www.tracelabs.org/initiatives/search-party