1) Legal & ethical preconditions (do this first)
Get written authorization — always. For production networks, have an explicit scope, time window, and owner sign-off. For tests, use a signed Rules of Engagement (RoE).
Define scope clearly — IP ranges, hosts, services, VMs, cloud assets, and...
