Here is a suggested workflow to get you started, consider it a training exercise rather than absolute since you will want to customize your workflow depending on your engagement.
The Social-Engineer Toolkit SET The Social-Engineer Toolkit SET is specifically designed to perform advanced attacks against the human element.
In the console it is "OpenVAS-Client.
Job openings Searching current job openings or postings via either the corporate website or via a job search engine can provide valuable insight into the internal workings of a target.
It performs zone transfers of specified domains, and checks the database in numerous ways for internal consistency, as well as accuracy.
This information may contain information regarding shareholders, members, officers or other persons involved in the target entity.