What is Orizon RECON

Orizon RECON shows you what your company exposes and what to fix first. This lesson uses Meccanica Adda as an example to show which scan fits each part of a company.

Summary

Meccanica Adda has a website and a portal on the internet, plus a factory network. RECON looks at them from different angles:

• the external scan starts from a domain, such as meccanicaadda.it, and sees what an attacker would see from the internet: subdomains, exposed services, vulnerabilities;
• the internal scan uses Scout, a probe installed on a Linux machine in your network, to find devices and weaknesses that are invisible from outside, including Active Directory.

All results come together in RECON.

Chapters

Key points

• An external scan only needs a domain: it enumerates subdomains, resolves DNS, finds open ports and technologies, then checks the versions it finds against vulnerability databases.
• An internal scan needs a Scout probe on a Linux host with systemd. The probe only talks to RECON outbound: you do not open any inbound port.
• With Scout you can also analyse Active Directory, once you connect a domain to the probe.
• Results include vulnerabilities ranked by severity, the NIS 2 compliance assessment, industry risk and PDF reports.

Transcript

The full transcript of the video (in Italian) is in the player's Transcript tab.

Related articles