Detection rules › By catalog entry

Microsoft-Windows-SMBServer

Catalog entry	Rules
Event ID 4000	1

Event ID 4000

1 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

Unsigned or Unencrypted SMB Connection to Share Established severity medium T1021,T1021.002

Back to all Microsoft-Windows-SMBServer catalog entries