Reconnaissance is normally the first step in the MITRE attack framework, which includes closely monitoring your network, systems, and applications and gathering information to plan for a cybersecurity attack.