detection.wiki

Splashtop-Splashtop Business app-Remote Computer Info › Event 35401

Event ID 35401 — The user SPID has disconnected a remote session on the remote computer.

Provider
Splashtop-Splashtop Business app-Remote Computer Info
Channel
Operational

Description

The user SPID has disconnected a remote session on the remote computer.

Message #

The user %1 has disconnected a remote session on the remote computer.

App version: %2

Computer name: %3

Error code: %4

Fields #

NameDescription
SPID UnicodeString—
Version_number UnicodeString—
SRS_Name UnicodeString—
Error_code UnicodeString—

Community Notes #

Legitimate RATs: a comprehensive forensic analysis of the usual suspects

References #