Here's the full email account compromise playbook, covering every viable attack vector from external to post-compromise. This is a guide on how to hack email addresses.