Test physical access
An adversary can test physical access options in preparation for the actual attack. This could range from observing behaviors and noting security precautions to actually attempting access.  
Tactic: Test Capabilities
DetectionDetectable by Common Defenses (Yes/No/Partial): Yes
Explanation: Defender often install badging, cameras, security guards or other detection techniques for physical security and monitoring.
Difficulty for the AdversaryEasy for the Adversary (Yes/No): No
Explanation: Requires a physical presence in the space being entered and increased risk of being detected/detained (e.g., recorded on video camera)
- Orange County Intelligence Assessment Center. (n.d.). Pre-Incident Indicators. Retrieved March 28, 2017.
- The Canadian Press. (2012, August 22). Reporter says Chinese news agency asked him to spy. Retrieved March 9, 2017.