NMAP - Single Port Scan

Sub-playbook that conducts a single port Nmap scan and returns the results to the parent playbook.

Pack

Nmap

Tasks

10

Inputs

• RemoteIP — Remote IP address in an incident/alert.
• RemotePort — Remote port number in an incident/alert.
• NMAPOptions — Options to be used for the Nmap scan. (We do "-p<RemotePort>" by default and recommend using "-Pn" to skip a ping check.)

Outputs

• ScanResult — The result of the scan (if done).
• ScanDone — Whether a scan was actually performed (based on subtypes).
• NMAP — NMAP scan data

Commands used

• nmap-scan