Skip to main content

SMB1 Detection

Summary​

This document checks whether SMB1 is enabled on the end machine. It runs the OS version compatible command to fetch the data.

CAUTION: DO NOT APPLY ANY ALERT TEMPLATE TO THIS MONITOR SET. Its only purpose is to fetch the data to be displayed in the Dataview - SMBv1 Status Audit. This monitor set should not be used for alerting or ticketing purposes.

Dependencies​

Details​

Suggested "Limit to": Windows Workstations and Servers
Suggested Alert Style: Continuous
Suggested Alert Template: Default Do Nothing

Insert the details of the monitor in the table below.

Check ActionServer AddressCheck TypeCheck ValueComparatorIntervalResult
System127.0.0.1Run FileREDACTEDMissing86400_

Target​

Managed Windows Service Plan Groups

How to Import​

Import - Remote Monitor - SMB1 Detection

Changelog​

2025-04-10​

  • Initial version of the document