Initial commit - 611 cybersecurity skills across all subdomains

skills/conducting-social-engineering-pretext-call/references/workflows.md

@@ -0,0 +1,83 @@
+# Workflows: Social Engineering Pretext Call
+
+## Vishing Campaign Workflow
+
+```
+┌─────────────────────────────────────────────────────────────────┐
+│              VISHING CAMPAIGN WORKFLOW                            │
+├─────────────────────────────────────────────────────────────────┤
+│                                                                  │
+│  1. AUTHORIZATION & SCOPING                                      │
+│     ├── Obtain written authorization                             │
+│     ├── Define target list (departments, roles)                  │
+│     ├── Define boundaries (no C-suite, no threats)               │
+│     ├── Agree on pretext scenarios                               │
+│     ├── Confirm call recording legality                          │
+│     └── Establish deconfliction process                          │
+│                                                                  │
+│  2. OSINT RECONNAISSANCE                                         │
+│     ├── Employee enumeration (LinkedIn, website)                 │
+│     ├── Organizational structure mapping                         │
+│     ├── Technology stack identification                          │
+│     ├── Internal terminology and process research                │
+│     └── Target prioritization                                    │
+│                                                                  │
+│  3. PRETEXT DEVELOPMENT                                          │
+│     ├── Select scenario(s) per target role                       │
+│     ├── Draft call scripts with key phrases                      │
+│     ├── Prepare objection handling responses                     │
+│     ├── Set up caller ID spoofing (authorized)                   │
+│     └── Rehearse delivery                                        │
+│                                                                  │
+│  4. CALL EXECUTION                                               │
+│     ├── Execute calls according to schedule                      │
+│     ├── Record calls (with legal authorization)                  │
+│     ├── Document responses and disclosures                       │
+│     ├── Note verification attempts by targets                    │
+│     └── Track time-to-disclosure metrics                         │
+│                                                                  │
+│  5. ANALYSIS & REPORTING                                         │
+│     ├── Calculate disclosure rates by department                 │
+│     ├── Identify patterns (role, tenure, training)               │
+│     ├── Compare against industry benchmarks                      │
+│     ├── Generate remediation recommendations                     │
+│     └── Present findings to stakeholders                         │
+│                                                                  │
+└─────────────────────────────────────────────────────────────────┘
+```
+
+## Pretext Selection Decision Tree
+
+```
+Select Pretext Based on Target Role
+│
+├── IT/Technical Staff
+│   ├── Vendor support call (patch emergency)
+│   ├── Cloud provider security alert
+│   └── Penetration test notification (meta-pretext)
+│
+├── Finance/Accounting
+│   ├── Wire transfer verification (CEO fraud)
+│   ├── Vendor payment update
+│   └── Audit compliance request
+│
+├── HR/Recruiting
+│   ├── Benefits enrollment verification
+│   ├── Background check follow-up
+│   └── Payroll system update
+│
+├── Executive Assistants
+│   ├── Executive impersonation (travel issue)
+│   ├── Board meeting preparation
+│   └── Urgent document request
+│
+├── General Employees
+│   ├── IT Helpdesk (password reset/VPN update)
+│   ├── Facilities (badge system update)
+│   └── Survey/research call
+│
+└── Front Desk/Reception
+    ├── Delivery/courier pretext
+    ├── Visitor registration
+    └── Employee directory request
+```