Walking Into an Unknown Network: The First Thing I Check

When I walk into a client network for the first time, I usually don’t know much about it. Sometimes the client thinks they know what’s on the network. Sometimes they don’t. Either way, the first problem isn’t troubleshooting. The first problem is situational awareness . Before I can diagnose anything, I need to understand what’s actually there. What devices exist on the network? What IP addresses are active? Is anything new? Did something disappear since the last scan? Without that context, you’re basically working blind. The Reality of Most Network Scanners Most mobile network scanners work the same way. You run a scan and you get a list like this: 192.168.1.10 DESKTOP-9F2A 192.168.1.12 ESP-4D21 192.168.1.15 android-71bf 192.168.1.18 UNKNOWN Technically that’s useful. It tells you which IPs respond. But when you're standing in an office trying to figure out what changed after you just rebooted a device or unplugged something, it doesn’t really answer the question you care about. The r