Just about every phase in the cyber kill chain is connected to a certain style of exercise in the cyberattack (irrespective of whether it’s an internal or exterior attack). Reconnaissance can be a pivotal phase in almost any sophisticated cyberattack and can be done the two on the web https://www.researchgate.net/publication/365308473_Development_of_Cyber_Attack_Model_for_Private_Network