Mapping a network from the outside in
Fyodor's nmap has become my single most-used tool when I want to know, with confidence, what is actually on a network. A short walk through what it does and why every defender should run it on their own perimeter regularly.