> 9 The CIFS server sends it's own SessionSetupAndX SMB to the domain > controller using the extracted challenge response just noticed something. "9 the cifs server sends it is own SS&X" does not make sense. surely this should be "9 the cifs server sends its own SS&X".