551｜SMB Session Authentication Failure

這個指令做什麼？

事件調查：SMB Session Authentication Failure。固定提供者 Microsoft-Windows-SMBServer；事件 ID 551。讀取事件證據，不代表偵測到入侵；需結合上下文判讀。 SMB Session Authentication Failure Client Name: %11 Client Address: %6 User Name: %9 Session ID: %7 Status: %4 (%3) SPN: %12 SPN Validation Policy: %13 Guidance: You should expect this error when attempting to connect to shares using incorrect credentials. This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients. This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled