Reminder: even though only Win10, Windows Server 2016, & 2019 shipped with inbound SMB1 auditing, we later backported the option to WS2012 R2 & WS 2008 R2 (& equiv clients).