theHarvester Starter Guide Polymath Studies Cybersecurity Academy OBJECTIVE Collect passive public information for an approved domain. AUTHORIZED USE Use this guide only with CyberLab targets, systems you own, or systems for which you have explicit written permission. WORKFLOW 1. Confirm the domain is owned or assigned. 2. Select one passive source. 3. Limit the query size. 4. Record found hosts or addresses with their source. 5. Remove duplicates. 6. Verify each meaningful result independently. 7. Mark false positives and stale records. LAB RECORD Target and authorization: Tool version: Date and time: Commands or actions: Evidence collected: Result: Defensive recommendation: REMEMBER A tool result is evidence to evaluate—not automatic proof. Verify important findings independently.