An attacker uses nmap to scan for port 445 and OS fingerprinting:
If you provide a (by CVE), I can help you structure a paper with: windows 10 pro 15063 exploit
Researchers often use a (like AFL or WinAFL) against these components on build 15063, knowing that a crash has a 90% chance of being a viable RCE or LPE. An attacker uses nmap to scan for port