Skip to content
Threat Feed
Subscribe

Product

SMB

1 brief RSS
medium advisory

Detection of Unauthorized SMB Traffic to the Internet

This brief documents the risks and detection strategies for internal Windows SMB (TCP 139/445) traffic traversing the network perimeter, a common indicator of unauthorized remote access or data exfiltration.

SMB initial-access exfiltration network
1r 2t