mirror of
https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
synced 2026-06-15 23:44:56 +03:00
mukul975
84 lines
4.6 KiB
Markdown
84 lines
4.6 KiB
Markdown
# Workflows: Social Engineering Pretext Call
|
|
|
|
## Vishing Campaign Workflow
|
|
|
|
```
|
|
┌─────────────────────────────────────────────────────────────────┐
|
|
│ VISHING CAMPAIGN WORKFLOW │
|
|
├─────────────────────────────────────────────────────────────────┤
|
|
│ │
|
|
│ 1. AUTHORIZATION & SCOPING │
|
|
│ ├── Obtain written authorization │
|
|
│ ├── Define target list (departments, roles) │
|
|
│ ├── Define boundaries (no C-suite, no threats) │
|
|
│ ├── Agree on pretext scenarios │
|
|
│ ├── Confirm call recording legality │
|
|
│ └── Establish deconfliction process │
|
|
│ │
|
|
│ 2. OSINT RECONNAISSANCE │
|
|
│ ├── Employee enumeration (LinkedIn, website) │
|
|
│ ├── Organizational structure mapping │
|
|
│ ├── Technology stack identification │
|
|
│ ├── Internal terminology and process research │
|
|
│ └── Target prioritization │
|
|
│ │
|
|
│ 3. PRETEXT DEVELOPMENT │
|
|
│ ├── Select scenario(s) per target role │
|
|
│ ├── Draft call scripts with key phrases │
|
|
│ ├── Prepare objection handling responses │
|
|
│ ├── Set up caller ID spoofing (authorized) │
|
|
│ └── Rehearse delivery │
|
|
│ │
|
|
│ 4. CALL EXECUTION │
|
|
│ ├── Execute calls according to schedule │
|
|
│ ├── Record calls (with legal authorization) │
|
|
│ ├── Document responses and disclosures │
|
|
│ ├── Note verification attempts by targets │
|
|
│ └── Track time-to-disclosure metrics │
|
|
│ │
|
|
│ 5. ANALYSIS & REPORTING │
|
|
│ ├── Calculate disclosure rates by department │
|
|
│ ├── Identify patterns (role, tenure, training) │
|
|
│ ├── Compare against industry benchmarks │
|
|
│ ├── Generate remediation recommendations │
|
|
│ └── Present findings to stakeholders │
|
|
│ │
|
|
└─────────────────────────────────────────────────────────────────┘
|
|
```
|
|
|
|
## Pretext Selection Decision Tree
|
|
|
|
```
|
|
Select Pretext Based on Target Role
|
|
│
|
|
├── IT/Technical Staff
|
|
│ ├── Vendor support call (patch emergency)
|
|
│ ├── Cloud provider security alert
|
|
│ └── Penetration test notification (meta-pretext)
|
|
│
|
|
├── Finance/Accounting
|
|
│ ├── Wire transfer verification (CEO fraud)
|
|
│ ├── Vendor payment update
|
|
│ └── Audit compliance request
|
|
│
|
|
├── HR/Recruiting
|
|
│ ├── Benefits enrollment verification
|
|
│ ├── Background check follow-up
|
|
│ └── Payroll system update
|
|
│
|
|
├── Executive Assistants
|
|
│ ├── Executive impersonation (travel issue)
|
|
│ ├── Board meeting preparation
|
|
│ └── Urgent document request
|
|
│
|
|
├── General Employees
|
|
│ ├── IT Helpdesk (password reset/VPN update)
|
|
│ ├── Facilities (badge system update)
|
|
│ └── Survey/research call
|
|
│
|
|
└── Front Desk/Reception
|
|
├── Delivery/courier pretext
|
|
├── Visitor registration
|
|
└── Employee directory request
|
|
```
|