In my past two blog posts, I’ve explored how to combine multiple port scanning tools to create a fast service scanning tool for large networks, and how I sped up nmap’s service scanning by changing its “wait for content” time. In this post, I’m going to be exploring how you can enrich the nmap-services-probes file with new information which offers both better results but also further speeds up service scanning.