Physical OSINT
Introduces foundational open-source intelligence methods and resources for gathering facility and site intelligence prior to physical visits.
Summary
Foundations of Physical OSINT
Open-source intelligence principles apply directly to physical security assessments and facility investigations. Publicly accessible information provides extensive insight into physical infrastructure, access controls, and site layouts.
Scoping and Initial Investigation Steps
Starting a physical investigation begins with identifying public records, business filings, satellite imagery, and social media footprints related to a target location and its operational staff.
Expert Tools and Data Sources
Investigators utilize specialized mapping databases, architectural registries, permit filings, and metadata extraction tools to map facility perimeters, camera placements, and badge reader types before arriving on site.
Operational Preparation for Physical Assessments
Synthesizing open-source data into an actionable intelligence brief optimizes on-site red team reconnaissance and minimizes operational footprint during physical penetration tests.
Related talks
Packet Hacking Village·38 min
Raggo · Hosmer
Demonstrates automated OSINT collection pipelines to extract actionable physical security intelligence, predictive indicators, and geopolitical risk assessments.
Lock Picking Village·32 min
Bill Graydon
Explains how to gather intelligence on target facilities using physical reconnaissance, satellite imagery, and architectural permits.
Creator Stage·56 min
Shawn
Walks through the full physical penetration testing lifecycle, from breach-focused reconnaissance to delivering actionable security upgrades for clients.