SMB trap for outbound (safeguard windows user info; cylance Spear report)