Step 1 – Collect Victim Company Logon Information Use a tool to do Internet searches for victim company info
• Example: Fingerprinting Organizations with Collected Archives (FOCA)
• Uses 3 search engines: Google, Bing, and DuckDuckGo to search for company content
• Search Types: web, document, DNS, IP, fingerprinting, data leaks, backup files, open directories, etc.