File Systems

Requirements

You have a Teleskope Account with the Admin role.
Network access from the Teleskope Application or Outpost
A valid service account with read permissions on all target file shares.
- NTLM domain account, or
- Kuberos configuration for Kerberos-based authentication.
(Optional) Workstation name if required by your NTLM authentication policies.
(Optional) NTLM hash if passwordless authentication is preferred.

SMB The Connection protocol to be used for Fileshare connectors.

A friendly, human-readable name to identify this Fileshare connection within Teleskope. Example:

Finance Department Fileshare

Default: 445 Override this value only if your SMB share is exposed over a non-standard port.

The hostname or IP address of the SMB server. Example:

files.example.corp

Choose an authentication method supported by your file system

To configure NTLM auth enter:

Domain The NTLM domain used by the service account.:
Service Account Username The username Teleskope should use to authenticate to the SMB share. Example:
```
svc-teleskope
```
Password The password associated with the NTLM service account. This field is required unless you provide an NTLM hash instead. Example:
```
[email protected]
```
NTLM Hash (Optional) If preferred, supply an NTLM hash instead of a password. Leave this field blank when authenticating with a standard password.
Workstation (Optional)
The workstation name to present during NTLM authentication if your environment requires one. Example:
```
TELSK-AGENT01
```

Use this method when your environment relies on Active Directory Kerberos policies.

To configure Kuberos enter:

Realm Example:
```
EXAMPLE.CORP
```
KDC Host Kerberos Key Distribution Center addresse. Example:
```
kdc1.example.corp
```
Service Principal The Kerberos principal used for SMB access. Example:
```
[email protected]
```
Auth (Password or Keytab)
- Input a password or upload a keytab file
(Optional) DNS Settings Required for environments with strict reverse-lookup or service ticket resolution rules.

After enrolling a file server, select any resulting shares and enable them for scanning.

After completing the enrollment:

Validate connectivity from your Teleskope Agent to the Fileshare host.
Ensure network ACLs allow SMB traffic from the agent to port 445 (or your configured port).
Begin a scan

Last updated 1 day ago

Was this helpful?