<Report xmlns="http://schemas.microsoft.com/sqlserver/reporting/2008/01/reportdefinition" xmlns:rd="http://schemas.microsoft.com/SQLServer/reporting/reportdesigner"><Body><Script><ReportItems><Textbox Name="Textbox2"><CanGrow>true</CanGrow><KeepTogether>true</KeepTogether><Paragraphs><Paragraph><TextRuns><TextRun><Value>SMBv1 Connections Detected</Value><Style></Style><FontSize>20pt</FontSize><FontWeight>Bold</FontWeight><FontFamily>Segoe UI</FontFamily></Style></TextRun></TextRuns><Style></Style><TextAlign>Center</TextAlign></Style></Paragraph></Paragraphs><rd:DefaultName>Textbox2</rd:DefaultName><Height>0.47792in</Height><Width>8.07167in</Width><Style></Style><Border><Style></Style>None</Style></Border><PaddingLeft>2pt</PaddingLeft><PaddingRight>2pt</PaddingRight><PaddingTop>2pt</PaddingTop><PaddingBottom>2pt</PaddingBottom></Style></Textbox><Textbox Name="Textbox4"><CanGrow>true</CanGrow><KeepTogether>true</KeepTogether><Paragraphs><Paragraph><TextRuns><TextRun><Value>Note: We run a script by default every 10 minutes. If any SMBv1 connections are detected we count that as an instance of time detected. The below chart shows the number of times SMBv1 was detected by the script over the time period specified.</Value><Style></Style><FontFamily>Segoe UI</FontFamily></Style></TextRun></TextRuns><Style /></Style></Paragraph></Paragraphs><rd:DefaultName>Textbox4</rd:DefaultName><Top>0.61333in</Top><Height>0.60417in</Height><Width>8.07167in</Width><ZIndex>1</ZIndex><Style></Style><Border><Style></Style>None</Style></Border><PaddingLeft>2pt</PaddingLeft><PaddingRight>2pt</PaddingRight><PaddingTop>2pt</PaddingTop><PaddingBottom>2pt</PaddingBottom></Style></Textbox><Tablix Name="Tablix1"><TablixBody><TablixColumns><TablixColumn><Width>3.5625in</Width></TablixColumn><TablixColumn><Width>4.47917in</Width></TablixColumn></TablixColumns><TablixRows><TablixRow><Height>0.25in</Height><TablixCells><TablixCell><CellContents><Textbox Name="Textbox5"><CanGrow>true</CanGrow><KeepTogether>true</KeepTogether><Paragraphs><Paragraph><TextRuns><TextRun><Value>Computer Name</Value><Style></Style><FontFamily>Segoe UI</FontFamily></Style></TextRun></TextRuns><Style /></Style></Paragraph></Paragraphs><rd:DefaultName>Textbox5</rd:DefaultName><Style></Style><Border><Color>LightGrey</Color><Style></Style>Solid</Style></Border><PaddingLeft>2pt</PaddingLeft><PaddingRight>2pt</PaddingRight><PaddingTop>2pt</PaddingTop><PaddingBottom>2pt</PaddingBottom></Style></Textbox></CellContents></TablixCell><TablixCell><CellContents><Textbox Name="Textbox9"><CanGrow>true</CanGrow><KeepTogether>true</KeepTogether><Paragraphs><Paragraph><TextRuns><TextRun><Value>Times SMBv1 was Detected</Value><Style></Style><FontFamily>Segoe UI</FontFamily></Style></TextRun></TextRuns><Style /></Style></Paragraph></Paragraphs><rd:DefaultName>Textbox9</rd:DefaultName><Style></Style><Border><Color>LightGrey</Color><Style></Style>Solid</Style></Border><PaddingLeft>2pt</PaddingLeft><PaddingRight>2pt</PaddingRight><PaddingTop>2pt</PaddingTop><PaddingBottom>2pt</PaddingBottom></Style></Textbox></CellContents></TablixCell></TablixCells></TablixRow><TablixRow><Height>0.25in</Height><TablixCells><TablixCell><CellContents><Textbox Name="ComputerName"><CanGrow>true</CanGrow><KeepTogether>true</KeepTogether><Paragraphs><Paragraph><TextRuns><TextRun><Value>=Fields!ComputerName.Value</Value><Style></Style><FontFamily>Segoe UI</FontFamily></Style></TextRun></TextRuns><Style /></Style></Paragraph></Paragraphs><rd:DefaultName>ComputerName</rd:DefaultName><Style></Style><Border><Color>LightGrey</Color><Style></Style>Solid</Style></Border><PaddingLeft>2pt</PaddingLeft><PaddingRight>2pt</PaddingRight><PaddingTop>2pt</PaddingTop><PaddingBottom>2pt</PaddingBottom></Style></Textbox></CellContents></TablixCell><TablixCell><CellContents><Chart Name="DataBar1"><ChartCategoryHierarchy><ChartMembers><ChartMember><Label /></ChartMember></ChartMembers></ChartCategoryHierarchy><ChartSeriesHierarchy><ChartMembers><ChartMember><Label>num Events</Label></ChartMember></ChartMembers></ChartSeriesHierarchy><ChartData><ChartSeriesCollection><ChartSeries Name="numEvents"><ChartDataPoints><ChartDataPoint><ChartDataPointValues><Y>=Fields!numEvents.Value</Y></ChartDataPointValues><ChartDataLabel><Style></Style><FontFamily>Segoe UI</FontFamily></Style><UseValueAsLabel>true</UseValueAsLabel><Visible>true</Visible></ChartDataLabel><Style /></Style><ChartMarker><Style /></Style></ChartMarker><DataElementOutput>Output</DataElementOutput></ChartDataPoint></ChartDataPoints><Type>Bar</Type><Style /></Style><ChartEmptyPoints><Style /></Style><ChartMarker><Style /></Style></ChartMarker><ChartDataLabel><Style></Style><FontFamily>Segoe UI</FontFamily></Style></ChartDataLabel></ChartEmptyPoints><ValueAxisName>Primary</ValueAxisName><CategoryAxisName>Primary</CategoryAxisName><ChartSmartLabel><CalloutLineColor>Black</CalloutLineColor><MinMovingDistance>0pt</MinMovingDistance></ChartSmartLabel></ChartSeries></ChartSeriesCollection></ChartData><ChartAreas><ChartArea Name="Default"><ChartCategoryAxes><ChartAxis Name="Primary"><Visible>False</Visible><Style></Style><Border><Color>Gainsboro</Color><Style></Style>None</Style></Border><FontSize>8pt</FontSize><Color>#5c5c5c</Color><FontFamily>Segoe UI</FontFamily></Style><ChartAxisTitle><Caption /><Style></Style><FontSize>9pt</FontSize><Color>#5c5c5c</Color><FontFamily>Segoe UI</FontFamily></Style></ChartAxisTitle><Margin>False</Margin><ChartMajorGridLines><Enabled>False</Enabled><Style></Style><Border><Color>Gainsboro</Color></Border></Style></ChartMajorGridLines><ChartMinorGridLines><Style></Style><Border><Color>Gainsboro</Color><Style></Style>Dotted</Style></Border></Style></ChartMinorGridLines><ChartMajorTickMarks><Style></Style><Border><Color>Gainsboro</Color><Style></Style>None</Style></Border></Style></ChartMajorTickMarks><ChartMinorTickMarks><Style></Style><Border><Color>Gainsboro</Color></Border></Style><Length>0.5</Length></ChartMinorTickMarks><CrossAt>NaN</CrossAt><Minimum>NaN</Minimum><Maximum>NaN</Maximum><ChartAxisScaleBreak><Style /></Style></ChartAxisScaleBreak></ChartAxis><ChartAxis Name="Secondary"><Visible>False</Visible><Style></Style><Border><Color>Gainsboro</Color><Style></Style>None</Style></Border><FontSize>8pt</FontSize><Color>#5c5c5c</Color><FontFamily>Segoe UI</FontFamily></Style><ChartAxisTitle><Caption /><Style></Style><FontSize>9pt</FontSize><Color>#5c5c5c</Color><FontFamily>Segoe UI</FontFamily></Style></ChartAxisTitle><Margin>False</Margin><ChartMajorGridLines><Enabled>False</Enabled><Style></Style><Border><Color>Gainsboro</Color></Border></Style></ChartMajorGridLines><ChartMinorGridLines><Style></Style><Border><Color>Gainsboro</Color><Style></Style>Dotted</Style></Border></Style></ChartMinorGridLines><ChartMajorTickMarks><Style></Style><Border><Color>Gainsboro</Color><Style></Style>None</Style></Border></Style></ChartMajorTickMarks><ChartMinorTickMarks><Style></Style><Border><Color>Gainsboro</Color></Border></Style><Length>0.5</Length></ChartMinorTickMarks><CrossAt>NaN</CrossAt><Location>Opposite</Location><Minimum>NaN</Minimum><Maximum>NaN</Maximum><ChartAxisScaleBreak><Style /></Style></ChartAxisScaleBreak></ChartAxis></ChartCategoryAxes><ChartValueAxes><ChartAxis Name="Primary"><Visible>False</Visible><Style></Style><Border><Color>Gainsboro</Color><Style></Style>None</Style></Border><FontSize>8pt</FontSize><Color>#5c5c5c</Color><FontFamily>Segoe UI</FontFamily></Style><ChartAxisTitle><Caption /><Style></Style><FontSize>9pt</FontSize><Color>#5c5c5c</Color><FontFamily>Segoe UI</FontFamily></Style></ChartAxisTitle><ChartMajorGridLines><Style></Style><Border><Color>Gainsboro</Color></Border></Style></ChartMajorGridLines><ChartMinorGridLines><Style></Style><Border><Color>Gainsboro</Color><Style></Style>Dotted</Style></Border></Style></ChartMinorGridLines><ChartMajorTickMarks><Style></Style><Border><Color>Gainsboro</Color><Style></Style>None</Style></Border></Style></ChartMajorTickMarks><ChartMinorTickMarks><Style></Style><Border><Color>Gainsboro</Color></Border></Style><Length>0.5</Length></ChartMinorTickMarks><CrossAt>NaN</CrossAt><Minimum>0</Minimum><Maximum>=Max(Fields!numEvents.Value, "Tablix1")</Maximum><ChartAxisScaleBreak><Style /></Style></ChartAxisScaleBreak><rd:SyncScope>Tablix1</rd:SyncScope><rd:SyncMaximum>true</rd:SyncMaximum></ChartAxis><ChartAxis Name="Secondary"><Visible>False</Visible><Style></Style><Border><Color>Gainsboro</Color><Style></Style>None</Style></Border><FontSize>8pt</FontSize><Color>#5c5c5c</Color><FontFamily>Segoe UI</FontFamily></Style><ChartAxisTitle><Caption /><Style></Style><FontSize>9pt</FontSize><Color>#5c5c5c</Color><FontFamily>Segoe UI</FontFamily></Style></ChartAxisTitle><ChartMajorGridLines><Style></Style><Border><Color>Gainsboro</Color></Border></Style></ChartMajorGridLines><ChartMinorGridLines><Style></Style><Border><Color>Gainsboro</Color><Style></Style>Dotted</Style></Border></Style></ChartMinorGridLines><ChartMajorTickMarks><Style></Style><Border><Color>Gainsboro</Color><Style></Style>None</Style></Border></Style></ChartMajorTickMarks><ChartMinorTickMarks><Style></Style><Border><Color>Gainsboro</Color></Border></Style><Length>0.5</Length></ChartMinorTickMarks><CrossAt>NaN</CrossAt><Location>Opposite</Location><Minimum>NaN</Minimum><Maximum>NaN</Maximum><ChartAxisScaleBreak><Style /></Style></ChartAxisScaleBreak></ChartAxis></ChartValueAxes><Style></Style><BackgroundColor>#00ffffff</BackgroundColor><BackgroundGradientType>None</BackgroundGradientType></Style><ChartElementPosition><Top>10</Top><Left>3</Left><Height>80</Height><Width>96</Width></ChartElementPosition></ChartArea></ChartAreas><Palette>BrightPastel</Palette><ChartBorderSkin><Style></Style><BackgroundColor>Gray</BackgroundColor><BackgroundGradientType>None</BackgroundGradientType><Color>White</Color></Style></ChartBorderSkin><ChartNoDataMessage Name="NoDataMessage"><Caption>No Data Available</Caption><Style></Style><BackgroundGradientType>None</BackgroundGradientType><FontWeight>Bold</FontWeight><TextAlign>General</TextAlign><VerticalAlign>Top</VerticalAlign></Style></ChartNoDataMessage><rd:DesignerMode>DataBar</rd:DesignerMode><DataSetName>DataSet1</DataSetName><Style></Style><Border><Color>LightGrey</Color><Style></Style>Solid</Style></Border><BackgroundColor>White</BackgroundColor><BackgroundGradientType>None</BackgroundGradientType></Style></Chart></CellContents></TablixCell></TablixCells></TablixRow></TablixRows></TablixBody><TablixColumnHierarchy><TablixMembers><TablixMember /><TablixMember /></TablixMembers></TablixColumnHierarchy><TablixRowHierarchy><TablixMembers><TablixMember><KeepWithGroup>After</KeepWithGroup></TablixMember><TablixMember><Group Name="Details" /><SortExpressions><SortExpression><Value>=Fields!numEvents.Value</Value><Direction>Descending</Direction></SortExpression></SortExpressions></TablixMember></TablixMembers></TablixRowHierarchy><DataSetName>DataSet1</DataSetName><Top>1.4675in</Top><Left>0.03in</Left><Height>0.5in</Height><Width>8.04167in</Width><ZIndex>2</ZIndex><Style></Style><Border><Style></Style>None</Style></Border></Style></Tablix></ReportItems><Height>4.3425in</Height><Style /></Style></Script></Body><Width>12.90625in</Width><Page><LeftMargin>1in</LeftMargin><RightMargin>1in</RightMargin><TopMargin>1in</TopMargin><BottomMargin>1in</BottomMargin><Style /></Style></Page><AutoRefresh>0</AutoRefresh><DataSources><DataSource Name="DataSource1"><DataSourceReference>/Data Warehouse Main</DataSourceReference></DataSource></DataSources><DataSets><DataSet Name="DataSet1"><Query><DataSourceName>DataSource1</DataSourceName><QueryParameters><QueryParameter Name="@StartDate"><Value>=Parameters!StartDate.Value</Value></QueryParameter><QueryParameter Name="@EndDate"><Value>=Parameters!EndDate.Value</Value></QueryParameter></QueryParameters><CommandText>select vme2.DisplayName as ComputerName,count(*) as numEvents from event.vEvent ve
inner join event.vEventRule ver on ver.EventOriginId=ve.EventOriginId
inner join vRule vr on vr.RuleRowId=ver.RuleRowId
inner join vManagedEntity vme on vme.ManagedEntityRowId=ver.ManagedEntityRowId
inner join vManagedEntity vme2 on vme2.ManagedEntityRowId=vme.TopLevelHostManagedEntityRowId
inner join vEventLoggingComputer vec on vec.EventLoggingComputerRowId=ve.LoggingComputerRowId
where vr.RuleSystemName = 'Security.Monitoring.Collect.SMBv1Connections'
and ve.DateTime between @StartDate and @EndDate
group by vme2.DisplayName
order by count(*)</CommandText></Query><Fields><Field Name="ComputerName"><DataField>ComputerName</DataField><rd:TypeName>System.String</rd:TypeName></Field><Field Name="numEvents"><DataField>numEvents</DataField><rd:TypeName>System.Int32</rd:TypeName></Field></Fields></DataSet></DataSets><ReportParameters><ReportParameter Name="StartDate"><DataType>DateTime</DataType><Prompt>Start Date</Prompt></ReportParameter><ReportParameter Name="EndDate"><DataType>DateTime</DataType><DefaultValue><Values><Value>=Now()</Value></Values></DefaultValue><Prompt>End Date</Prompt></ReportParameter></ReportParameters><rd:ReportUnitType>Inch</rd:ReportUnitType><rd:ReportID>eddfdb7d-80f4-4b74-a4aa-68f27af14d8e</rd:ReportID></Report>
Home