Networking
- Networking
Windows
Linux
Enterprise Architecture
Mac
- Forensics
  - Page 3
Attacker Information
IR Playbook
- Activity from Unmanaged Host
- Recommendations
Reverse Engineering
- Python - Pyinstaller

Powered by GitBook

On this page

Log Location:
Considerations:

Windows

Forensics

Event Logs

Event Log IDs

SMB

30803 Failed to Establish a Network Connection

PreviousSMB Next31010 SMB Client Failed to Connect

Last updated 8 months ago

Log Location:

Microsoft\Windows\SMBClient\Security

Considerations:

This event is logged by default
Can be used to hunt for connections to isolated workstations during active incident.