> For the complete documentation index, see [llms.txt](https://book.redsquad.xyz/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://book.redsquad.xyz/web-hacking/osint/business-osint.md).

# Business OSINT

## Methodology

<https://techjournalism.medium.com/osint-checklist-for-company-investigations-86c3752c095d>" %}

### IP addresses

1. FInd public infos about the enterprise :
   1. [FRANCE](https://www.societe.ninja/index.html)
   2. Other countries : search for "*registre de commerce*" "*commercial register*"
2. Find IP ranges and other infos on [RIPE](https://ripe.net)
3. Enter those ranges in [shodan](https://www.shodan.io/)

### Physical

> **Search Engine Queries - Locations**
>
> “company\_name” headquarters address
>
> “company\_name” branch office
>
> “city state” county

### People

> site:bizjournals.com inurl:potm “company\_name“
>
> site:linkedin.com “company\_name” “present (1 month)”

## Leaks / DNS

{% embed url="<https://intelx.io>" %}