Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

How to find a caller like an exe or script or user account who accessed an SMB share via wireshark?

Hello Team,

Is it possible to capture who accessed SMB share like an .exe or user ID or something like that. I am trying to figure out why a connection was made from source IP to destination ID on an SMB share.

thank you SunMan