Suricata Rule to Detect SMB File Transfer

[rmcleod13215 (Ron)]

Just need to alert on a file transfer via SMB. That’s it. Should be simple but don’t see any consistant signature in the traffic.