Problem
The Bryan Hall Legal Group has been concerned for quite some time that confidential information on their active cases is leaking out to opposing counsel and to the media. As the city's premier security consultant, they retain you to verify whether this is true or not. After conducting a full range of security tests in their environment, you discover that the company has very lax security policies and has been hacked multiple times through the use of enumeration. Based on this information, writea report to the Chief Security Information Officer (CISO) outlining enumeration and what processes and tools a hacker could use to gain access to the group's resources. Create a security improvement plan that outlines your findings and steps to harden their security environment and mitigate enumeration risk.