Because threat actors use some pen$-$testing tools $($such as nmap and OpenVAS$),$ using these tools may be illegal in some jurisdictions even for pen testers. As a pen tester, you must be aware of these restrictions. Create a report listing the jurisdictions where the use of nmap or OpenVAS could break the law. Also list the laws that apply and report under what circumstances the laws allow these tools to be used legally.