Assume you are working for a consulting company that has been hired by Level 3 Communications for some security assessment work. Your manager would like to know how much you can find out about what Level 3 is using inside their network. This may be infrastructure or desktops, including hardware and software. Write a professional memo to your manager indicating what you were able to find, how you found it and what you may recommend to Level 3 as a way to limit the amount of information that can be found about them. Also, include any names and associated e-mail addresses you find from management that could be used later in a social engineering attack.

The only rule for information gathering is you are NOT allowed to touch their network. At all. Use only third party resources.

You can use the professional memo format at the URL below as a guide for how to structure and create your memo. You must write your memo in a manner that you would expect to present to someone at the senior manager or director level.