List any shares:
smbmap - H 10.10.10.100
Recursively scan a share for all contents
smbmap -R [ShareName] - H 10.10.10.100
Download a file of interest:
smbmap -R [ShareName] - H 10.10.10.100 -A [fileName] -q
File will then be located in /usr/share/smbmap
if we have creds, maybe we can see additional shares:
smbmap -d active.htb -u svc_tgs -p [password] -H 10.10.10.100
If the IPC$ share can be read, then you can do RID brute force and enumerate usernames