A reconnaissance attack gathers information about a target before or during an attack. Generative artificial intelligence (AI) can automate this work, making cyber operations faster, cheaper, and more accessible without changing their basic structure. section 5.2
Reconnaissance also supports defense. AI agents such as PentestGPT can simulate attackers, scan networks, follow multistep penetration-testing procedures, and identify exploitable vulnerabilities before malicious actors do. section 8.7
AI-assisted reconnaissance appears in several related activities:
- Mapping organizational infrastructure and discovering vulnerabilities during cyber operations. section 5.2
- Scanning networks and gathering context during authorized penetration testing. section 8.7
- Supporting broader phishing, fraud, malware, and social-engineering campaigns. section 5.2
Figure 5.3 Attack pathways and targets in cyber and social engineering attacks enabled by generative AI [18]
Use the attack-pathway overview to relate reconnaissance to cyber and social-engineering targets enabled by generative AI. section 5.2

