Police have revealed they know "very little" about the father and son duo behind the terror attack at Bondi Beach last night.
The identities of the two alleged gunmen have been confirmed by 9News as Sajid Akram, 50, and Naveed Akram, 24.
Speaking to media this afternoon, NSW Police Commissioner Mal Lanyon said he could not comment on how long the pair had been in Australia.
LIVE UPDATES: Sixteen dead after Bondi Beach terror attack
"They have [had] obviously a connection for quite a period of time within Australia," he said.
"We are very much working through the background of both persons.
"At this stage we know very little about them."
A police source told 9News crime reporter Emma Partridge that Naveed Akram may have had links to an Islamic State terror cell.
It is believed an IS flag was located in his car at the scene.
READ MORE: Rabbi and French citizen identified as victims of Bondi Beach shooting attack
A Jewish event at Archer Park to celebrate the first day of Hanukkah was the target of the shooting.
The shooters were from Bonnyrigg in south-western Sydney, but had stayed in a short-term stay property in Campsie in the lead-up to the attack.
It has not been confirmed how long the men were at the Campsie property.
Lanyon confirmed the older man was dead, while the other, his 24-year-old son, remains in hospital in a critical but stable condition under police guard.
READ MORE: How world leaders have reacted to the Bondi terror attack
He said the younger man would "likely" face criminal charges, suggesting the accused would recover from his injuries.
"Based on his medical condition, it is likely that that person may face criminal charges," the commissioner said.
He also said licensed firearms were used in the attack and the father held a gun licence.
Lanyon said the 50-year-old had been a NSW licensed firearms owner for 10 years and owned six guns.
Six weapons have since been recovered, though it unclear if all were found at the scene in Bondi.
He confirmed the older gunman was a member of a gun club, which allowed him to obtain his firearms licence.
Lanyon insisted the test to obtain a firearms licence was stringent.
"The Firearms Registry conducts a thorough examination of all applications to ensure a person is fit and proper to hold a firearms licence," he said.
Pair 'lied to family about whereabouts' before attack
The family of the father-and-son duo deceived loved ones on their whereabouts leading up to the attack, it is alleged.
The mother of Naveed, Verena, told The Sydney Morning Herald that she had last spoken to her family on Saturday morning, and was told the father and son pair were in Jervis Bay on the NSW South Coast.
"He rings me up [on Sunday] and said, 'Mum, I just went for a swim. I went scuba diving. We're going … to eat now, and then this morning, and we're going to stay home now because it's very hot'," Verena said.
Premier rejects claim of intelligence failure
Lanyon said there was "no indication" in advance that either of the men allegedly involved in the shooting were planning the attack.
He also said he could not comment about potential motives for the attack.
"We're still very early in the investigation, we're happy to provide information," Lanyon said.
"I want to give our investigators the opportunity to investigate thoroughly without speculation.
"We heard a lot information was coming forward. I want to make sure it's accurate … our investigation will be thorough."
READ MORE: How you can donate blood in the wake of the Bondi terror attack
Lanyon confirmed police and ASIO were aware of the 24-year-old, but had no intelligence the pair were planning an attack.
NSW Chris Minns refused to call the attack an intelligence failure.
"It wouldn't be the right thing to do within 24 hours of this shocking, violent attack to be pronouncing failures here without the aid of an independent investigation," he said.
Former secretary for Home Affairs Mike Pezzullo told 9News that "not every cell is intercepted" by ASIO.
"They do a marvellous job - ASIO, the AFP, their state ministry counterparts," Pezzullo said.
"They can't be everywhere. And frankly, if they were, we'd be a police state."
Where are police investigating?
Officers swarmed on a property in Bonnyrigg in Sydney's west in the hours immediately after the shooting.
The property was the home of one of the gunmen.
Police have seized firearms licensed to the alleged shooter.
READ MORE: 'Daddy, what is that?': Family forced to run for their lives as Bondi shooting began
"Ballistics and forensic investigation will determine those six firearms are the six that were licensed to that man," Lanyon said.
Streets were closed off as tactical teams and detectives surrounded the scene.
Detectives are still at the scene this morning, with a heavy amount of police activity still seen outside of the house.
Police also raided a property in Campsie this morning, where the alleged gunmen are believed to have stayed immediately before the shooting.
It is not known how long they had been staying at the property, but it is believed to be a short-term rental.
Large areas of Bondi Beach remain a crime scene today.
Those devices were removed and the exclusion zone was scaled back but the area remained a crime scene.
If you have been impacted by the terror attack in Bondi there is support available. To contact Lifeline Australia, call 13 11 14 or text 0477 13 11 14. For people under 25 years old, you can contact Kids Helpline at 1800 55 1800. Both of these are available on a 24/7 basis. If you wish to donate blood, you can find your nearest donor centre here