Passive

• Physical/ Social
• Web/Host
• Email address
• Looking for credentials dumped in data breaches
• Google Fu or Google Dorking
• Social media - LinkedIn

Active