It uses a buffer overflow in the SMBv1 message block to. Effectively to filter it you need to block all SMBv1 packets. Which you should do already because the

It uses a buffer overflow in the SMBv1 message block to. Effectively to filter it you need to block all SMBv1 packets. Which you should do already because the modern SMB is v3 Let alone you shouldn't be listening for AD management commands from the wide internet.