Social Engineering is the manipulation of the human element to expose confidential information or systems.
The goal of this phase is to gather up as much information as possible about the organization. This involves:
Establish the social engineering framework for the campaign. The plan should flush out how the attacks are going to be executed, the order of the social engineering chain, and deliverables.
The campaign will be launched during the specified scope and timeframe. Depending on the type of engagement and plan of attack, the campaign can last for weeks or months.
At the end of the campaign, a full report of all the findings are documented. These will include: