Host Discovery

For when you have an internal presence on the network, with an IP address (but perhaps no credentials yet).

• Check IP address (ipconfig / ifconfig / ip addr) and subnet mask

• What's on the current subnet with us? nmap -sn 10.10.0.0/24 (or whatever subnet)

• Document any hosts. Continue to host enumeration