Skip to main content

SMBv1 Status Audit

Summary

This dataview gathers data from the script SMBv1 Status Audit/Autofix [DV,Param] and depicts the status of SMB enabled on the agent where it is deployed.

Dependencies

Columns

ColumnDescription
ClientClient name of the agent
LocationLocation name of the agent
ComputerThe computer name of the agent
Operating SystemThe operating system name of the agent
Last ContactThe last contact information of the agent with Automate
Last Logged In UserLast user who logged into the machine.
SMB1 Audit Server StatusIndicates if SMBv1 Server is enabled on the machine as detected by the Remote Monitor - SMB1 Detection.
SMB1 Audit Client StatusIndicates if SMBv1 Client is enabled on the machine as detected by the Remote Monitor - SMB1 Detection.
SMB1 Detection Update TimeIndicates the last time the Remote Monitor - SMB1 Detection ran and updated the SMB1 detection status on the machine.
SMB1 In UseIndicates whether SMB1 traffic has been detected on the machine as reported by the 'ProVal - Production - SMB1 Traffic Detection' monitor.
SMB1 Traffic Update TimeIndicates the last time the 'ProVal - Production - SMB1 Traffic Detection' monitor ran and updated the SMB1 traffic detection status on the machine.
SMB1 Autofix StatusStores the status of SMBv1 after the execution of the Script - SMBv1 Status Audit/Autofix [DV,Param]
SMB1 Autofix LoggingThis stores the PowerShell execution output of the Script - SMBv1 Status Audit/Autofix [DV,Param] for logging purposes
SMB1 Autofix Vulnerability StateIndicates whether the device is considered vulnerable or not after the SMB1 autofix remediation has been applied by the Script - SMBv1 Status Audit/Autofix [DV,Param]
SMB1 Autofix DateIndicates the date and time when the Script - SMBv1 Status Audit/Autofix [DV,Param] was last executed to apply the SMB1 autofix remediation on the machine

Changelog

2026-04-15

  • Updated the document to include previously missing dataview columns and expanded the column descriptions for clarity.

2025-04-10

  • Initial version of the document