Low level to knowledge of a target, the penetration tester must perform in-depth reconnaissance to learn about the target.
For example:
- External penetration tester is given only the company name and no further information.
- Internal penetration tester where the tester either has no bypass controls to gain initial access.