— Sloth Boss
How do attackers get information without asking for it directly? They use elicitation—the strategic use of casual conversation to extract details without the target feeling interrogated. This is often achieved by first building rapport, making the target feel comfortable and willing to share. These are core skills for both attackers and defenders. Understanding elicitation and rapport helps you recognize when a seemingly innocent conversation is actually a targeted information-gathering attempt. This is crucial for protecting sensitive data in informal settings and is a key skill for security professionals who need to gather intelligence or conduct interviews.