Useful tools I found for subdomain enumeration
https://github.com/OWASP/Amass
https://github.com/projectdiscovery/subfinder