Network Service Scanning via nmap, masscan, or Port Scan Tools (T1046)

Ankit Mehta@Secvyn

•updated Jun 29, 2026•0•0•0

Detects the execution of known network scanning utilities (nmap, masscan, portscan) or suspicious command line arguments often associated with network reconnaissance activities.