In reply to Michael.

Thanks Michael, you have a valid point. If your environment relies on Windows networking, then it’s not so easy to just turn off SMB. That's why it's so important to block SMB ports at the network boundary, prevent endpoint-to-endpoint sharing, and use tools to monitor for malicious network activity.

Nor is switching to another protocol a silver bullet. At present SMB is frequently targeted, but bad actors can and do leverage other protocols and propagation methods to carry out malicious activity.