Passive Fingerprinting of Network Reconnaissance Tools

Detecting reconnaissance provides a key warning of an adversary's impending attack or intelligence-gathering effort against a network. Yet many current network defense tools provide little capability to detect network reconnaissance.