detection.wiki

Splashtop-Splashtop Business app-Remote Computer Info › Event 35200

Event ID 35200 — The user SPID has deleted the remote computer from the team.

Provider
Splashtop-Splashtop Business app-Remote Computer Info
Channel
Operational

Description

The user SPID has deleted the remote computer from the team.

Message #

The user %1 has deleted the remote computer from the team.

App version: %2

Computer name: %3

Error code: N/A

Fields #

NameDescription
SPID UnicodeString—
Version_number UnicodeString—
SRS_Name UnicodeString—

Community Notes #

Legitimate RATs: a comprehensive forensic analysis of the usual suspects

References #