1200KM / tool
Nmap — Attack Tool
Network discovery and service-scanning utility. Its different scan modes produce different telemetry; a tool name alone is not a technique or a detection.
Tool identity and evidence
Editorial ecosystem entry, not an ATT&CK software object in the selected snapshot. Its linked capabilities are deliberately limited to the evidence below.
Aliases: none recorded
Existing author guides
- Mastering Nmap: A Comprehensive Guide to Network Exploration and Security Auditing. Part 1 · 2024-10-26
- Mastering Nmap: A Comprehensive Guide to Network Exploration and Security Auditing. Part 2 · 2024-10-27
- Mastering Nmap: A Comprehensive Guide to Network Exploration and Security Auditing. Part 3 · 2024-10-28
- Mastering Nmap: A Comprehensive Guide to Network Exploration and Security Auditing. Part 4. Scripts · 2024-10-30
- Reinventing Recon: Nmap Meets ChatGPT · 2025-11-24
Primary documentation
No reviewed association in this snapshot.
Connected ecosystem references
Linked tags
Technique-specific simulations and detections
Detection links describe the associated behavior, not independently verified tool-specific signatures.
Telemetry context
Derived from the explicitly linked TTPs; not proof of sensor coverage for this tool.
Pinned research references. No browser attack runner or production-validated detector is asserted. Imported procedures remain unvalidated; any bounded lab evidence has its own scope. ATT&CK / Atomic provenance · Detection provenance.