What does the Recon module primarily do in Empire?

• A. Exfiltrate data
• B. Find additional targets
• C. Run scripts on the host
• D. Lock the user out

Answer: (B)

The Recon module is focused on discovery and expansion. After you have a foothold, its job is to map out the environment and surface other machines or targets you could pivot to. It gathers information about the network, hosts, domains, and resources so you can plan where to move next. That makes it fundamentally about finding additional targets to extend access, rather than stealing data, executing commands on the current host, or locking users out. So the Recon module’s primary purpose is to identify new targets for further exploitation.