1. Identify the company's email pattern
Search "firstname @company.com" in Google with quotes. The first hit usually reveals the pattern: first.last, flast, firstname, first_last, or firstinitial.lastname. Once you know the pattern for one employee, you know it for everyone — most companies use exactly one scheme.