# File Systems

## Requirements

* You have a Teleskope Account with the Admin role.
* Network access from the Teleskope Application or Outpost
* A valid service account with read permissions on all target file shares.
  * NTLM domain account, **or**
  * Kuberos configuration for Kerberos-based authentication.
* (Optional) Workstation name if required by your NTLM authentication policies.
* (Optional) NTLM hash if passwordless authentication is preferred.

## Step 1: Connection Details

#### **Protocol**

`SMB`\
The Connection protocol to be used for Fileshare connectors.

#### **Fileshare Name**

A friendly, human-readable name to identify this Fileshare connection within Teleskope.\
Example:

```
Finance Department Fileshare
```

#### **Port**

Default: `445`\
Override this value only if your SMB share is exposed over a non-standard port.

#### **Server Hostname or IP**

The hostname or IP address of the SMB server.\
Example:

```
files.example.corp
```

***

## Step 2: Authentication

Choose an authentication method supported by your file system

{% tabs %}
{% tab title="NTLM" %}
**NTLM Authentication**

To configure NTLM auth enter:

* **Domain**\
  The NTLM domain used by the service account.:

  ```
  ```
* **Service Account Username**\
  The username Teleskope should use to authenticate to the SMB share.\
  Example:

  ```
  svc-teleskope
  ```
* **Password**\
  The password associated with the NTLM service account.\
  This field is required unless you provide an NTLM hash instead.\
  Example:

  ```
  svc-teleskope@EXAMPLE.CORP
  ```
* **NTLM Hash (Optional)**\
  If preferred, supply an NTLM hash instead of a password.\
  Leave this field blank when authenticating with a standard password.
* **Workstation (Optional)**

  The workstation name to present during NTLM authentication if your environment requires one.\
  Example:

  ```
  TELSK-AGENT01
  ```

{% endtab %}

{% tab title="Kerberos" %}
**Kerberos Authentication**

Use this method when your environment relies on Active Directory Kerberos policies.

To configure Kuberos enter:

* **Realm**\
  Example:

  ```
  EXAMPLE.CORP
  ```
* **KDC Host**\
  Kerberos Key Distribution Center addresse.\
  Example:

  ```
  kdc1.example.corp
  ```
* **Service Principal**\
  The Kerberos principal used for SMB access.\
  Example:

  ```
  svc-teleskope@EXAMPLE.CORP
  ```
* **Auth (Password or Keytab)**
  * **Input a password or upload a keytab file**
* **(Optional) DNS Settings**\
  Required for environments with strict reverse-lookup or service ticket resolution rules.
  {% endtab %}
  {% endtabs %}

***

## Step 3: Select Shares

After enrolling a file server, select any resulting shares and enable them for scanning.

## Next Steps

After completing the enrollment:

1. Validate connectivity from your Teleskope Agent to the Fileshare host.
2. Ensure network ACLs allow SMB traffic from the agent to port 445 (or your configured port).
3. Begin a scan


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.teleskope.ai/connectors/file-systems.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.