Zenmap

Nmap Project

Official GUI front-end for Nmap with topology view and saved scan profiles.

Network Recon & Monitoring Free & Open Source GUI Learning Cross-platform

Cyber Kill Chain & Defender Lifecycle

Attacker — Kill Chain
1 Reconnaissance
2 Weaponization
3 Delivery
4 Exploitation
5 Installation
6 Command & Control
7 Actions on Objectives
Defender — IR Lifecycle
8 Detection / Monitoring
9 Containment & Eradication
10 Post-incident Forensics

Description

Zenmap is the official cross-platform GUI for Nmap. It targets analysts who want repeatable scan workflows without remembering every command-line flag.

Useful features for a SOC analyst:

  • Profile manager — save custom scan recipes ("internal asset discovery", "DMZ audit") and rerun them in one click.
  • Topology tab — visual map showing latency and hops.
  • Compare results — diff two scans to see what changed between scheduled audits.
  • Output and import compatible with raw Nmap XML.

Use cases

  • Onboarding analysts new to Nmap
  • Periodic audits with saved profiles
  • Visual presentation of scan results in reports