How to detect SMBv1 scanning and SMBv1 established connections
https://www.netfort.com/blog/detect-s...
Even if you disable SMBv1 on all clients and servers, it is still good practice to check if any systems on your network are using this protocol. You may have un-managed systems like personal laptops or embedded operating systems within other network connected devices.
Watch out for SMBv1 scanning, SMBv1 connection attempts and SMBv1 established connections