The initial phase of security testing where an attacker gathers information about target systems and networks.