smblog

日志安全中：

5140,5142,5143,5144,

 

5140	A network share object was accessed
5142	A network share object was added.
5143	A network share object was modified
5144	A network share object was deleted.

 

 

 

参考资料：

https://www.netsurion.com/articles/auditing-file-shares-windows-security-log