Run enum4linux
checklist
Walkthrough
Run a full enum4linux sweep against SMB/RPC to pull users, shares, groups, and the password policy. Hits include a user list and null-session-readable shares to feed later steps.
Commands
bash
enum4linux -a <IP> | tee enum4linux.log