31020｜Session key for connection is weaker than required. Connection will be closed as a result.

這個指令做什麼？

事件調查：Session key for connection is weaker than required. Connection will be closed as a result.。固定提供者 Microsoft-Windows-SMBClient；事件 ID 31020。讀取事件證據，不代表偵測到入侵；需結合上下文判讀。 Session key for connection is weaker than required. Connection will be closed as a result. Server: %2 User: %6 Session key length: %3 Required Session key length: %4 Guidance: To establish a connection with a shorter session key, set the following registry DWORD value name with the value as decimal bits: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters] "MinimumSessionKeyLength" Important: If you have configured the 'Network security: Configure encryption types allowed for Kerberos' security policy to prevent use of 256-bit keys but also set the MinimumSessionKeyLength greater than 128 bits, the computer will not be able to make SMB connections. Setting MinimumSessionKeyLength higher than 128 bits will also prevent SMB connections using NTLM.