If you have not already install the patch, see this update to protect the servers from SMBGhost. I am currently helping a client deploy Azure ATP among other security services available through Azure and M365. Azure ATP can help detect Remote Code Execution Vulnerability and with the update, the SMBGhost as well. If you need help deploying Azure ATP, let me know. All the tasks needed to be executed, the plan, configuration on hand and ready to help you out. Stay safe.