The attack narrative is a critical part of the report that tells the story of how the tester exploited vulnerabilities, gained access, and moved laterally. It helps stakeholders understand the real-world impact in a readable and logical sequence.
User activities are more operational logs than part of a pentest report.
Customer remediation plan is the client’s responsibility.
Key management might be discussed but is not a required component of the report.
[Reference: PT0-003 Objective 5.2 – Components of a penetration test report, including attack narrative., , , , ]
Submit