🔍 Search, Scan & Validate — Nmap Metasploit Workflow (High-Level Guide) Use Nmap for surface discovery and profiling: map hosts, find open ports, identify services/versions, and run safe NSE checks to highlight likely weaknesses. Focus first on asset inventory and context (which hosts are in-scope, which ports/services matter) before any deeper testing. 🧭 Export and normalize findings for handoff: save structured scan outputs (XML/JSON) and feed them into triage tools or a vulnerability tracke