Hackers often raise the trust level of a phishing message by modeling the email to look similar to the internal email used by the target company. This includes using logos, formatting, and names of th

Exploration is not a recognized phase in standard cybersecurity attack frameworks such as the Cyber Kill Chain or MITRE ATT&CK.

Investigation is a term used in incident response and digital forensics contexts, not in the attacker pre-attack information gathering phase.

Reconnaissance is the formal cybersecurity term for the initial phase of an attack where adversaries collect information about a target, including company structure, personnel names, logos, and internal communication styles. This intelligence is then used to craft convincing spear-phishing or social engineering attacks that appear legitimate to recipients.

Enumeration is a specific technical process of systematically listing network resources, users, or services - not the broader research phase of gathering organizational and personnel intelligence.