SMB
Direct-hosted SMB file, printer and named-pipe traffic.
Windows file shares, domain controller access, Group Policy, software deployment and administrative shares.
Client to server
Never expose SMB directly to the public internet. Require signing or encryption where appropriate and disable SMBv1.