| File Replication Service is a Microsoft Windows Server service for distributing folders stored in the SYSVOL shared folder on domain controllers and Distributed File System (DFS) shared folders. It is also known as NTFRS after the name of the executable file that runs the service. This service is part of Microsoft's Active Directory.
This SonicWALL signature identifies legitimate File Replication traffic. This detection is based on a UUID found during an RPC call. Due to the lack of documentation, it is not always possible to determine the exact version of an application based on UUIDs. Please see the "Microsoft RPC End Point Mapper" signature(s) for more information. |
