Nmap
Import your Nmap network scans for discovery and inventory
The Nmap connector allows you to import your Nmap network scan results for network discovery, ports inventory and operating systems detection.
Objective
The Nmap connector allows you to import the following information:
- Network discovery (active hosts, scanned IP ranges)
- Open ports and services
- Detected operating systems
Prerequisites
- XML files generated by Nmap (format
.xml) - Nmap scans executed on your infrastructure
Procedure
Generate Nmap Scan Results
- Execute a Nmap scan on your network:
nmap -sV -O -oX scan_results.xml <target_range>
Parameters:
-sV: Service version detection-O: Operating system detection-oX scan_results.xml: Output in XML format<target_range>: IP range to scan (e.g.,192.168.0.0/24)
- Wait for the scan to complete (duration varies based on target size).
- The
.xmlfile will be created in the current directory.
Import into OverSOC
- In OverSOC, go to Data Sources Settings > Sources.
- Select Nmap and click Configure.
- Upload the
.xmlfile generated by Nmap. - Click Save Configuration.
OverSOC will automatically parse the XML file and import network discovery data, detected services and operating system information.
Official Documentation
For more information on Nmap XML output format, see the Nmap XML Output Documentation