These Nmap scripts allow the user to identify the specific ports that have been in use by the SCADA systems. For example, as shown in the proceeding recipe, ports 102 and 502 are specific ports that can be used to determine whether there are any SIMATIC devices in the network. An analyst can scan the whole network for ports 102 and 502, and once found, they can perform a service scan to check whether any of them are running any related SCADA software.