Everyone runs nmap. Fewer people read it properly. A practical tour of scan types, NSE, output, timing, and evasion.