Event ID 1001 — The Splashtop remote session (Session_ID) has ended.
Description
The Splashtop remote session (Session_ID) has ended. The remote session lasted Duration_Time.
Message #
Fields #
| Name | Description |
|---|---|
Session_ID UnicodeString | — |
Duration_Time UnicodeString | — |
Version_number UnicodeString | — |
Community Notes #
Legitimate RATs: a comprehensive forensic analysis of the usual suspects