# File Systems

## Requirements

* You have a Teleskope Account with the Admin role.
* Network access from the Teleskope Application or Outpost
* A valid service account with read permissions on all target file shares.
  * NTLM domain account, **or**
  * Kuberos configuration for Kerberos-based authentication.
* (Optional) Workstation name if required by your NTLM authentication policies.
* (Optional) NTLM hash if passwordless authentication is preferred.

## Step 1: Connection Details

#### **Protocol**

`SMB`\
The Connection protocol to be used  for Fileshare connectors.

#### **Fileshare Name**

A friendly, human-readable name to identify this Fileshare connection within Teleskope.\
Example:

```
Finance Department Fileshare
```

#### **Port**

Default: `445`\
Override this value only if your SMB share is exposed over a non-standard port.

#### **Server Hostname or IP**

The hostname or IP address of the SMB server.\
Example:

```
files.example.corp
```

***

## Step 2: Authentication

Choose an authentication method supported by your file system 

{% tabs %}
{% tab title="NTLM" %}

### NTLM Authentication

To configure NTLM auth enter:

* **Domain**\
  The NTLM domain used by the service account.:

  ```
  ```
* **Service Account Username**\
  The username Teleskope should use to authenticate to the SMB share.\
  Example:

  ```
  svc-teleskope
  ```
* **Password**\
  The password associated with the NTLM service account.\
  This field is required unless you provide an NTLM hash instead.\
  Example:

  ```
  svc-teleskope@EXAMPLE.CORP
  ```
* **NTLM Hash (Optional)**\
  If preferred, supply an NTLM hash instead of a password.\
  Leave this field blank when authenticating with a standard password.
* **Workstation (Optional)**

  The workstation name to present during NTLM authentication if your environment requires one.\
  Example:

  ```
  TELSK-AGENT01
  ```

{% endtab %}

{% tab title="Kerberos" %}

### Kerberos Authentication

Use this method when your environment relies on Active Directory Kerberos policies.

To configure Kuberos enter:

* **Realm**\
  Example:

  ```
  EXAMPLE.CORP
  ```
* **KDC Host**\
  Kerberos Key Distribution Center addresse.\
  Example:

  ```
  kdc1.example.corp
  ```
* **Service Principal**\
  The Kerberos principal used for SMB access.\
  Example:

  ```
  svc-teleskope@EXAMPLE.CORP
  ```
* **Auth (Password or Keytab)**
  * **Input a password or upload a keytab file**
* **(Optional) DNS Settings**\
  Required for environments with strict reverse-lookup or service ticket resolution rules.
  {% endtab %}
  {% endtabs %}

***

## Step 3: Select Shares

After enrolling a file server, select any resulting shares and enable them for scanning.

## Next Steps

After completing the enrollment:

1. Validate connectivity from your Teleskope Agent to the Fileshare host.
2. Ensure network ACLs allow SMB traffic from the agent to port 445 (or your configured port).
3. Begin a scan