Event ID 31701 — The user SPID disabled Device Redirection on the remote computer SRS_Name during the Splashtop remote session (Session_ID).

Description

The user SPID disabled Device Redirection on the remote computer SRS_Name during the Splashtop remote session (Session_ID).

Message #

The user %1 disabled Device Redirection on the remote computer %2 during the Splashtop remote session (%3).

App version: %4

Source: %5



Device info

Product name: %6 (%7)

Manufacturer: %8 (%9)

Serial number: %10

VendorID: %11

ProductID: %12

Class type: %13 (%14)

Sub-class type: %15 (%16)

Protocol: %17 (%18)

Device version: %19

Usb version: %20

Fields #

Community Notes #

Legitimate RATs: a comprehensive forensic analysis of the usual suspects

References #

• RULER Project https://ruler-project.github.io/ruler-project/RULER/remote/Splashtop