The Bondi gunmen acted alone and were not part of a broader terror cell, the federal police chief says as investigators continue to probe their mysterious month-long Philippines trip.
Australian Federal Police Commissioner Krissy Barrett on Tuesday cited an initial finding by the Philippine National Police that the father and son were not instructed by others to carry out the attack.
Surviving gunman Naveed Akram, 24, and his dead father, Sajid Akram, 50, are known to have arrived in the capital Manila from Australia on November 1 before travelling on to Davao City.
They arrived back in Sydney on November 29, two weeks before the shooting attack on a Jewish Hanukkah celebration at Bondi Beach that left 15 people dead and 41 injured.
"The initial assessment ... is that the individuals rarely left their hotel, and there is no evidence to suggest they received training or underwent logistical preparation for their alleged attack," Ms Barrett said at the AFP headquarters in Canberra.
"CCTV footage capturing their stay in the Philippines has been provided to the AFP, and we are currently reviewing that material.
"What this points to, and I will again advise this is a point-in-time assessment, is that these individuals are alleged to have acted alone."
Ms Barrett was giving an update on Operation Arques, the ongoing counter-terrorism investigation into the December 14 attack by NSW Police, Australian Federal Police, the Australian Security Intelligence Organisation and NSW Crime Commission.
"There is no evidence to suggest these alleged offenders were part of a broader terrorist cell, or were directed by others to carry out an attack," she added.
"However, I want to be clear, I am not suggesting that they were there for tourism."
Parts of the Philippines have previously been a haven for terrorist cells planning attacks in other countries.
Radicalisation, extremism and terrorism expert Clarke Jones said Davao City is an unusual place for a holiday, and the investigation may reveal they planned to meet someone.
“You don’t go there on time out, but of course, you can’t rule that out,” he told AAP.
“I would say they were planning to meet someone or to potentially go to a madrasa (a college for Islamic instruction).
“Often before large scale attacks, terrorists receive some sort of religious blessing or fatwa to give them permission to carry out the attack.”
Dr Jones said it remained a possibility the pair did meet someone.
“Or maybe it didn’t happen and the trip was a failure, but they still carried out the attack anyway,” he said.
Australian authorities have previously alleged the shooters were inspired by Islamic State.
Sajid Akram was killed by responding police while his son Naveed is before the courts after being charged with 59 offences, including 15 counts of murder.
Ms Barrett said the AFP continued to investigate "those who corrupt Islam in their radical recruitment drive for hatred and fear".
"We have gone through the sermons line by line, sought out experts and legal advice on charging those who we believe are inciting hatred towards the Jewish community," she said.
"I remain concerned about vulnerable adults and youth who are susceptible or open to manipulation by religious and other extremists who encourage violence or desensitise violence."
Prime Minister Anthony Albanese, who on Tuesday completed his 12th national security committee meeting in Canberra since the attack, said the government would legislate a crackdown on preachers and leaders who promote violence.
