Penetration Testing

Penetration Test Overview

1. Scope Determination – its vital that we determine your organization’s needs, document any agreed upon rules of engagement parameters, set expectations and deliver accordingly.
2. Discovery Phase – scour whois databases, war dialing, port sniffing passive active scan tools, to obtain as much information as possible about the target. We also leverage on traditional means such as social media sites, blogs, Usenet postings and Social Engineering tactics.
3. Enumeration Step – utilize discovery results such as domain names, ip schema, hardware preference, vendor preference and leverage in order to actively obtain account names, user names, network share information, application version information, determine running services, (Our Scope is limited only by previously agreed-upon rules of engagement)
4. Vulnerability Mapping – TierFive’s security group will map the profile of the target environment to publicly known, or often identify unknown vulnerabilities.
5. Exploitation Testing will exploit any identified vulnerabilities in an attempt to circumvent security and gain privileged access to the target system. TierFive employs parallel but mutually exclusive automated tactics and the art of actual manual testing.
6. Report Findings we fully document all methodologies findings and a prioritized matrix of actions, work efforts, and resolution recommendations. TierFive will formally report to the technical point of contact, review and provide clarification at the conclusion of testing.
7. Remediation Support – TierFive is available to provide additional support for findings and implementing recommendations, or any remediation efforts.