Enumerate Active SMB Sessions
This most often requires admin privileges
Enumerate active SMB sessions (including RPC/DCOM over named pipes) on the remote target:
As Windows might close the active SMB session after a short period of time (a few seconds to a minute) this has a high chance of false positives.
Previously --sessions
Last updated
Was this helpful?