30803 Failed to Establish a Network Connection

Log Location:

  • Microsoft\Windows\SMBClient\Security

Considerations:

  • This event is logged by default

  • Can be used to hunt for connections to isolated workstations during active incident.

Last updated