Scanning IP Blocks <- Vulnerability Wordlist Client Configurations Firmware Hardware Software Credentials Email Addresses Employee Names DNS Domain Properties Network Security Appliances Topology Trust Dependencies Business Relationships Determine Physical Location Identify Tempo Roles Spearphishing Attachment Link Service Voice Purchase Technical Data Threat Intel Vendors CDNs Digital Certificates DNS/Passive Scan Databases WHOIS Code Repositories Search Engines Social Media