Enumeration of Windows/Unix network services on an HTB box or authorized lab: SMB (139/445), RPC, NetBIOS, LDAP, SNMP, NFS. Trigger this when nmap shows these ports. Covers: share listing (smbclient, smbmap), user and policy enumeration (enum4linux-ng, rpcclient, netexec), anonymous/null session access, file extraction. Produces credentials, accessible shares, and usernames for the next steps.