SMB Files log overview

A brief overview of how Corelight's SMB_Files log can help you catch exfiltration attempts, malware propagation, and other malicious activity in your enterprise network traffic. Corelight provides detailed information about SMB file actions like open, read, write, delete, rename, and modification of attributes over SMB connections in addition to UNC path details like server, share, and file path and name.