Which technique is used in social engineering to subtly extract information?

Elicitation is a technique widely employed in social engineering that focuses on subtly coaxing information from individuals without raising suspicion. This method often involves engaging someone in conversation while strategically asking questions or making comments that encourage them to divulge sensitive information. Unlike more aggressive tactics, elicitation relies on the natural flow of dialogue, making it less likely for the targets to realize that they are revealing valuable information.

This approach often entails employing open-ended questions, active listening, and establishing rapport to create an environment where the target feels comfortable sharing details. By using interpersonal skills rather than direct interrogation, the elicitor can gather information that might otherwise remain confidential.

Other techniques, while they may contribute to information gathering, do not emphasize the discreet and subtle nature of elicitation as effectively. For example, persuasion techniques might seek to influence someone's decision or belief but do not inherently focus on the unobtrusive extraction of data. Information solicitation may imply a direct request for information, while infiltration methods refer to physical access to secure areas or systems, rather than conversational tactics. Thus, the effectiveness of elicitation lies in its ability to blend in with normal conversation, making it a key tool in the social engineer's playbook.