Problem
Alexander Rocco Corporation has multiple OSs running in its many offices. Before conducting a security test to determine the vulnerabilities you need to correct, you want to determine whether any OSs are running that you're not aware of. Christy Fitzgerald, the network administrator/security officer, is resistant to giving you information after he learns you're there to discover network security vulnerabilities. He sees you as a threat to his position. After several hours of interviews, you can ascertain only that Mike's personal e-mail address is [email protected], and an old RHEL server is running on one of the company's systems. Based on this information, answer the following questions:
I. What tools might you use after learning Mike's e-mail address?
II. What can you determine by entering Mike's e-mail address into Google? What about just the handle "vetman2601"?
III. Could the information you learned from Google be used to conduct vulnerability testing?
IV. A memo to the IT manager, Bob Jones, about the potential issues with running a old RHEL 5.8 server, and mention the importance of patch hygiene. Make sure your memo explains how you gathered this information and offers constructive feedback. Your memo shouldn't point a finger at any company employees; it should discuss problems on a general level.