In plain English
Reconnaissance is the intelligence-gathering phase that happens before an attacker makes their first move. This includes searching public sources (OSINT), scanning internet-facing systems for open ports, and identifying which software versions are running. What attackers find in this phase shapes every subsequent decision about how to attack.
