Clicky


Report Description
Windows File Shares
       Deleted Files Show all files that have been deleted from Windows File Shares
       Deleted folders Show all folders that have been deleted from Windows file shares
       Media Files Show all Media files accessed through Windows File Share
       Microsoft Office Files Show a list of MS Office files accessed on Windows File Shares
       Ransomware: Top Clients Renaming Files Show the top file servers by the amount of file renames on that server
       Ransomware: Wannacry Extensions Show any file server using the file extensions associated with Ransomware attacks
       Ransomware: Wannacry Ransom Text File Show any file server using the file names associated with Ransomware
       Ransomware: Wannacry SMBv1 Show any file server using the SMB1 file share protocol which may be vulnerable to a Ransomware attack
       Top File Share Actions Show top actions(Read/Write/Delete etc.) associated with Windows File Shares
       Top File Share active Client IPs Show most active client IPs accessing Windows File Shares based on data volume
       Top File Share Servers Show most active File Share servers based on the data volumes handled
       Top File Share Users Show most active File Share Users based on data volume
       Top Fileservers, Clients and Actions (by IP | by User) Show most active File Share servers, includes client IP addresses and actions(Read/Write/Delete etc.)
Windows File Shares (Low Level Reports)
       Filenames and Actions by Server Show most accessed files and folders stored on Windows File Share and associated actions(Read/Write/Delete etc.)
       Filenames and Clients by Server Show most active client IP addresses,the filenames(and path) accessed based on number of actions
       Filenames and File Servers by User Show most active Usernames, the filename(and Path) and server based on File Share actions
       Filenames by Actions (by IP | by User) Show File and folder activity with associated server and client IP addresses
       Filenames by Client Audit trail of file and folder activity on Windows File Share with Client IP addresses
       Filenames by Server Audit trail of all files and folders accessed on Windows File Share servers
       Network Events (SMB) (by IP | by User) All network events associated with Windows file shares
       Top Client IPs by Number of Actions Show most active client IPs based on the number of File Share actions(Read/Write/Delete etc.)
       Top File Share Conversations by Data Volume Top File Share connections based on data volume.
       Top File Share servers by Number of Actions Show most active File Share servers based on the number of File Share actions(Read/Write/Delete etc.)
       Top Filenames by Number of Actions Top file names based on number of associated actions
       Top Fileservers and Clients (by IP | by User) Show most active File Share servers with client IP addresses