detection.wiki

Splashtop-Splashtop Business app-Remote Computer Info › Event 35403

Event ID 35403 — The user SPID has cleared the credential for the remote computer SRS_Name.

Provider
Splashtop-Splashtop Business app-Remote Computer Info
Channel
Operational

Description

The user SPID has cleared the credential for the remote computer SRS_Name.

Message #

The user %1 has cleared the credential for the remote computer %2.

App version: %3

Fields #

NameDescription
SPID UnicodeString—
SRS_Name UnicodeString—
Version_number UnicodeString—

Community Notes #

Legitimate RATs: a comprehensive forensic analysis of the usual suspects

References #