Social Engineering Tradecraft

Phishing infrastructure is the easy part — the craft is the human side. This is social engineering as a red-team discipline: the psychology that makes it work, OSINT to build a believable pretext, the channels (phishing, vishing, smishing, physical), physical tradecraft (tailgating, badge cloning, USB drops), and how an engagement is scoped with rules of engagement and a blameless debrief. Then the half that matters most: how to defend. Authorised testing and awareness only.