Cross-Post: MIR-SWAMP PEN TESTING WITH BLACK HILLS

This blog post summarizes a pro bono engagement in which Black Hills Information Security conducted network and web application penetration testing and a risk assessment for the SWAMP (Software Assurance Marketplace) team; it describes pre-test planning, scope determination, user notifications and maintenance windows, and an initial reconnaissance phase, and notes that the infrastructure tolerated testing without disruption.