For the OSINT Assessment, no details or preparation is required. This is essentially a “black box” engagement, where our Consultant will use a toolkit to attempt to find available data, just as a real hacker would. For the Internal Pen Test element, we may need a few details to enable a smooth and effective test. For the Phishing exercise, we just require the target email addresses, and potentially a relevant theme for the email content.