@DannyDH We recently added this for SMB over QUIC (and added some new
SMB signing/encryption auditing for capabilities). But we've not had
specific audit events for SMB client and server like this with the
capabilities that were used. I have put that into our backlog, we will
look into adding it in ...
Hi, any update to the 'event log' part?? I see it's possible to view the
state of an active connection by using Get-SmbConnection |fl Signed.But
this only shows the active state for (outbound) smb connections only. No
info on inbound connections is logged. The "SmbServer" logs also do not
contain an...
Latest Comments