SMB1 Audit

https://learn.microsoft.com/en-us/windows-server/storage/file-server/troubleshoot/detect-enable-and-disable-smbv1-v2-v3?tabs=server

Detect Audit:

Get-SmbServerConfiguration | Select AuditSmb1Access

Enable Audit:

Set-SmbServerConfiguration -AuditSmb1Access $true

Disable Audit:

Set-SmbServerConfiguration -AuditSmb1Access $false