Passive reconnaissance
Gathering as much information as possible about target real-world locations. Examine the organisation from the perspective of a “seriously bad guy”. See everything an attacker could by using the usual reconnaissance tools, including Google Earth, social media, and job boards.