External Remote SMB Logon from Public IP — Detection Rule
Detects successful logon from public IP address via SMB. This can indicate a publicly-exposed SMB port.
Detects successful logon from public IP address via SMB. This can indicate a publicly-exposed SMB port.