Windows discover & Mount Discover¶ Start with a nmap scan nmap -T4 $IP_RANGE/24 --open After the servers with SMB services were discovered, run a more deep and detailed scan nmap -T4 $IP -sV -sC Mount¶ net use Z: \\10.0.0.1\C$ smbserver_111 /user:administrator
