OSINT of Facilities by Physical Reconnaissance

When hacking a physical facility, intelligence is key. Knowing the internal layout of a building will assist in identifying and accessing targets as efficiently as possible and anticipating security measures. In addition, for effective social engineering, it helps to know where you're going. This talk will focus on inferring what is inside a building just by looking at the outside: what is the layout of the hallways, where are the stairwells and elevators, where are what rooms? Bill will introduce a methodology for deducing the floor plan of a building from observing its external envelope, which is the result of years of research into thousands of architectural plans for a wide range of facilities.

Also outlined will be loads of techniques for situational awareness and intelligence gathering when navigating through a building. The implications for physical red teams and for facility managers to harden their operational security against these techniques being used by bad actors will be examined. This talk focuses on low-tech techniques, most involving only the human senses. Attendees will come away from the talk with a new perspective on the built world around them, and will be able to apply it in all urban aspects of their day-to-day lives.