detection.wiki

Splashtop-Splashtop Business app-Remote Session › Event 31720

Event ID 31720 — The user SPID enabled Remote Stylus on the remote computer SRS_Name during the Splashtop remote session (Session_ID).

Provider
Splashtop-Splashtop Business app-Remote Session
Channel
Operational

Description

The user SPID enabled Remote Stylus on the remote computer SRS_Name during the Splashtop remote session (Session_ID).

Message #

The user %1 enabled Remote Stylus on the remote computer %2 during the Splashtop remote session (%3).

App version: %4

Fields #

NameDescription
SPID UnicodeString—
SRS_Name UnicodeString—
Session_ID UnicodeString—
Version_Number UnicodeString—

Community Notes #

Legitimate RATs: a comprehensive forensic analysis of the usual suspects

References #