detection.wiki

Splashtop-Splashtop Business app-Remote Computer Info › Event 35101

Event ID 35101 — The user SPID has moved the remote computer to a different group.

Provider
Splashtop-Splashtop Business app-Remote Computer Info
Channel
Operational

Description

The user SPID has moved the remote computer to a different group.

Message #

The user %1 has moved the remote computer to a different group.

App version: %2

Computer name: %3

From: %4

To: %5

Error code: %6

Fields #

NameDescription
SPID UnicodeString—
Version_number UnicodeString—
SRS_Name UnicodeString—
Previous_Group UnicodeString—
Group UnicodeString—
Error_code UnicodeString—

Community Notes #

Legitimate RATs: a comprehensive forensic analysis of the usual suspects

References #