Scans

How does the network discovery work?

The discovery scan is an automated process that scans a range of IP addresses to identify each individual device and classify them as separate assets. This scanning procedure is the initial step in all network scans, allowing you to map out networks and IP ranges for active hosts and automatically generate them as assets.

If you are running a vulnerability scan, the discovery is completed first and if any alive hosts are found, it will proceed to scan ports using either TCP SYN or a 3-way handshake to gather more information.

Discovery scan and performance
Discovery scans can have high impact on your scan performance. Both in terms of coverage and time consumption.
Learn more about optimizing scans here:
https://support.holmsecurity.com/knowledge/how-do-i-optimize-scans