Anonymous/guest access to shares - Readable shares containing sensitive files (scripts with credentials, configuration files, backups) - Writable shares (potential for payload delivery) - Password policies (lockout threshold, complexity requirements) - User lists for password spraying - SMBv1 enable