The Vulnerability Scanning phase of the penetration test is conducted using automated tools. Next, AT&T Cybersecurity consulting manually confirms the results from the automated tools. Manual testing is done for discovery and elimination of false positives, verification of scan results, and identification of complex, emerging, or obscure vulnerabilities.