Actions
Bug #4622
closedFile deletions over SMB are not always logged
Affected Versions:
Effort:
Difficulty:
Label:
Description
It did not work for SMBv1 on pap found here https://radajo.blogspot.com/2008/01/investigating-file-deletion-from_20.html
It was not implemented for SMBv2 as Wireshark filter smb2.file_info.infolevel == 0x0d can show it
Updated by Philippe Antoine about 3 years ago
- Status changed from In Review to Closed
Actions