551 SMB Auth Failed
Log Location:
Microsoft\Windows\SMBServer\Security
Considerations:
This event is logged by default
Can be used to hunt for failed authentication attempts over SMB.
Last updated
Microsoft\Windows\SMBServer\Security
This event is logged by default
Can be used to hunt for failed authentication attempts over SMB.
Last updated