Do a packet capture for your particular network and then modify then clone the existing IPS signatures related to the SMB protocol to match that particular flow.
Regards
Farrukh
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.