Everywhere I read is to be careful using network scanners and that vulnerability scanners should only be used in active reconnaissance as scanners tend to be noisy.
How would a network administrator or security technician determine if one of these scanners was used? Could this be determined using log files or programs such as packet analyzers?
I have tried searching but I have had trouble finding anything on this. Mostly all I can find is on conducting such scans.