SMB credentials

Description

General

• Documentation: https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-cifs/d416ff7c-c536-406e-a951-4f04b2fd1d2b
• Summary: Server Message Block (SMB), also known as CIFS (Common Internet File System), is a network protocol used to share files, printers and miscellaneous communications between nodes on a network. This detector aims at finding SMB credentials in the form of an URI connection string.

Revoke the secret

A user credentials can be revoked or modified on the server side.

Details for SMB URI

• Family: credentials

• Category: data_storage

• High recall: True

• Validity check available: False

• Analyzer available: False

• Minimum number of matches: 5

• Occurrences found for one million commits: 0.007

• Prefixed: True