Knowing what to take¶

The collection phase is where reconnaissance translates into access to data. Identifying what exists, where it lives, and which identity controls it is prerequisite to everything that follows. Done well, collection leaves no evidence of enumeration and stages only what is needed.