I noticed after running Responder on my internal network that my MacBook Pro Mojave is sending out NetBIOS name query requests looking for __MSBROWSE__ and WORKGROUP which Responder will send a poisoned request to. I know __MSBROWSE__ should be held by the NetBIOS domain master browser and WORKGROUP is the default domain all Windows operating systems are initially tied to but I would like to disable this behavior on my MacBook Pro. I have tried to disable and unload the NetBIOS daemon with the following commands but still noticed the same behavior.
sudo launchctl disable system/netbiosd
sudo launchctl unload -w /System/Library/LaunchDaemons/com.apple.netbiosd.plist
sudo launchctl unload -w /System/Library/LaunchAgents/com.apple.netbiosd.plist
