# What is SMB, the file-sharing protocol?

SMB (Server Message Block) is the protocol most office networks use to share files and printers, for example when you open a document on a shared drive. Because it gives access to company data and is also used for remote administration, attackers rely on it heavily once inside: to copy data, to spread to other machines and, in ransomware attacks, to encrypt files on shared drives. SMB should never be reachable from the internet. Inside the network, a workstation suddenly opening SMB sessions to many servers is a classic sign of lateral movement, which NetSenX flags on every plan.

FAQ: [What is…? Network and security terms](https://netsenx.com/en/faq/glossary) · https://netsenx.com/en/faq/what-is-the-smb-file-sharing-protocol

## Read next

- https://netsenx.com/en/what-is-ndr
- https://netsenx.com/en/problems-we-solve

## Related questions

- [What is a domain controller?](https://netsenx.com/en/faq/what-is-a-domain-controller)
- [What is NTP, and why does correct time matter for security?](https://netsenx.com/en/faq/what-is-ntp-and-why-does-time-matter-for-security)
- [What is syslog?](https://netsenx.com/en/faq/what-is-syslog)
- [What is SNMP?](https://netsenx.com/en/faq/what-is-snmp)
- [What is an endpoint?](https://netsenx.com/en/faq/what-is-an-endpoint)