Methodology

OSINT Checklist For Company Investigations

IP addresses

  1. FInd public infos about the enterprise :
    1. FRANCE
    2. Other countries : search for “registre de commerce” “commercial register
  2. Find IP ranges and other infos on RIPE
  3. Enter those ranges in shodan

Physical

Search Engine Queries - Locations

“company_name” headquarters address “company_name” branch office “city state” county

People

site:bizjournals.com inurl:potm “company_name“

site:linkedin.com “company_name” “present (1 month)”

Leaks / DNS

Intelligence X