detection.wiki

Splashtop-Splashtop Business app-Remote Computer Info › Event 35400

Event ID 35400 — The user SPID has disconnected a remote session on the remote computer.

Provider
Splashtop-Splashtop Business app-Remote Computer Info
Channel
Operational

Description

The user SPID has disconnected a remote session on the remote computer.

Message #

The user %1 has disconnected a remote session on the remote computer.

App version: %2

Computer name: %3

Error code: N/A

Fields #

NameDescription
SPID UnicodeString—
Version_number UnicodeString—
SRS_Name UnicodeString—

Community Notes #

Legitimate RATs: a comprehensive forensic analysis of the usual suspects

References #