rpcclient

We can use the rpcclient tool with a null session to enumerate a workstation or Domain Controller.

rpcclient -U'%' 10.10.110.17

SMB Enumeration

SMB Enumeration Cheatsheet