Notes:
whois, nslookup, dig
DejaNews (now Google Groups)
Cold calls to random numbers
Impersonation (esp. Tech Support or Help Desk)
OS fingerprinting is important -- don't want to use NT tactics on a Linux box!