I Don’t Need a Badge – Lessons Learned from Physical Social Engineering

A covert entry assessment is a physical security assessment in which penetration testers try to gain access to sensitive or valuable data, equipment, or a certain location on a target site, all while undetected. This article will provide an introduction to covert entry assessments, and will address the many factors to consider when deciding on a pretext for physical social engineering. It will also include a story from a real engagement, focusing on the human side of physical security and …

access address article assessment assessments badge covert data don engineering entry equipment forensics introduction lessons learned location penetration physical physical security security security assessment social social engineering story target testers undetected