What does the "Open" Action signify in LANGuardian file share reports?

  • 1
  • Idea
  • Updated 3 years ago
Open actions are part of the SMB protocol and precede any reads/write etc.
However, we found they didn't provide any useful information (as always followed by a more interesting event). Also, Windows Explorer seems to generate a lot of them (I think for filetype identification).
So, we don't log them any more. This is configurable and they can be enabled, that's why there's an event type filter for them.
Photo of Aisling Brennan

Aisling Brennan, Official Rep

  • 391 Posts
  • 8 Reply Likes

Posted 3 years ago

  • 1

Be the first to post a reply!