This section explains how to use the
qq smb_close_sessions
command.Description
Force close SMB sessions matching one or more of a set of filters.
Usage
qq smb_close_sessions [-h] [--identity IDENTITY] [--location LOCATION] [--share-name SHARE_NAME] [--ip IP]
Flags
Flag Name | Required | Description |
---|---|---|
--identity
|
No | Close only the sessions that match the specified user's identity in one of the following forms: a name or a SID optionally qualified with a domain prefix (for example, "local:name", "S-1-1-0", "name", "world:Everyone", "ldap_user:name", "ad:name"), or an ID type (for example, "uid:1001", "auth_id:513", "SID:S-1-1-0"). |
--location
|
No | Use the list of sessions from the smb_list_sessions command to close only the session with the specified location. |
--share-name
|
No | Close only the sessions that are connected to the share with the specified case-sensitive name. Sessions connected to multiple shares will disconnect from all shares using the session. |
--ip
|
No | Close only the sessions that originate from the specified IP address. |