SMB1 Enabled
Summary
This role will check if SMB1 is enabled on a device. For security purposes, SMB1 should be disabled on endpoints, and this role can help determine which machines have SMB enabled.
This data is viewable in the dataview: @Security - SMB1 Enabled Status Check [Role]
Settings
| Detection String | Comparator | Result | Applicable OS |
|---|---|---|---|
{%@powershell.exe \"(Get-SmbServerConfiguration).EnableSMB1Protocol\"@%} | Contains | True | Windows OS |