A security consultant is engaged to assess an organization's network. During the initial phase, she uses Whois lookups and Google Dorking to collect employee information, IP addresses, and domain names without directly touching the target's systems. Which phase of the ethical hacking process is she performing, and by what technique?