31010 SMB Client Failed to Connect

Log Location:

• Microsoft\Windows\SMBClient\Security

Considerations:

• This event is logged by default

• Can be used to hunt for failed authentication attempts over SMB.