the body of evevnt is:
”
**The share denied anonymous access to the client.
Client Name: 10.139.70.35
Client Address: 10.139.70.35:49157
Share Name: *in
Share Path: ??C:UsersjodatDesktopin
Source: SMBServer
Task Category: (1007)
Keywords: Audit Failure,Audit Failure
User: SYSTEM
Computer: kaj.smbmm.ir
Channel Microsoft-Windows-SMBServer/Security
- Security
( UserID) S-1-5-18
SharePath ??C:UsersjodatDesktopin
ClientName 10.139.70.35**
“
- Does it mean that: client 10.139.70.35 wants to access folder C:UsersjodatDesktopin which belongs to user jodat on server kaj.smbmm.ir but that was not successful?
- filder “in” is a share folder?
- what is the manner which client wants to access the folder?
- Was user jodat logged in during the access?
- What about user SYSTEM? who is it? was it jodat?
- Why UserID is S-1-5-18?
Regards
Ali