DNS Enumeration
Mail Server Enumeration
Zone Transfer Testing
Wild Card Testing
Sub-Domain Brute-Forcing (Top 20,000 sub-domains from the The Alexa Top 1 Million)
Interesting Target Identification
Passive Sub-Domain Gathering (NetCraft)
Email Enumeration (Google, Bing, LinkedIn)
User Enumeration (LinkedIn)
Source Smart Searching (Google, Bing, LinkedIn searches based on your location, to make sure searches are as fast as possible)
Evidence Report (Gives you the url locations of the gathered data to allow for potential remediation)