Re: Internet access for security consultants - pen tests, attack traffic, bulk e-mail, etc.

I work for a MSSP (Managed Security Services Provider) that provides some of these services including vulnerability scanning and such. If it's a legitimate provider doing work for customers, you should never get a complaint about their activities. Before we do any kind of scan, we have a contract

RE: Internet access for security consultants - pen tests, attack traffic, bulk e-mail, etc.

Quick note to thank everyone for their input. So far everything that has been suggested publicly and privately has been right in line with what were already putting on paper so this provided some great feedback and confirmation that we’re going in the right direction.

Re: Internet access for security consultants - pen tests, attack traffic, bulk e-mail, etc.

On Mon, Sep 11, 2017 at 3:40 PM, Sean Pedersen wrote: > We were recently approached by a company that does security consulting. > Some > of the functions they perform include discovery scans, penetration testing, > bulk e-mail generation (phishing, malware, etc.), hosting fake botnets - > basical

Re: Internet access for security consultants - pen tests, attack traffic, bulk e-mail, etc.

Ping the DNC? :-) https://www.wired.com/story/the-dncs-technology-chief-is-phishing-his-staff-good/ Tim On 9/11/17 3:40 PM, Sean Pedersen wrote: > We were recently approached by a company that does security consulting. Some > of the functions they perform include discovery scans, penetration tes

Internet access for security consultants - pen tests, attack traffic, bulk e-mail, etc.

We were recently approached by a company that does security consulting. Some of the functions they perform include discovery scans, penetration testing, bulk e-mail generation (phishing, malware, etc.), hosting fake botnets - basically, they'd be generating a lot of bad network traffic. Targeted at