Splashtop-Splashtop Streamer-Status

12 events across 1 channel

Event ID	Title	Channel
1	Splashtop streamer has been opened.	Operational
2	Splashtop streamer has been closed.	Operational
100	The streamer was logged in.	Operational
101	The streamer was logged out.	Operational
200	This computer was added to a Splashtop team.	Operational
201	This computer was removed from a Splashtop team.	Operational
300	Splashtop streamer went online.	Operational
301	Splashtop streamer went offline.	Operational
400	A remote user has renamed the computer.	Operational
401	A remote user has restarted the streamer.	Operational
402	A remote user has triggered Normal Reboot.	Operational
403	A remote user has triggered Safe mode reboot.	Operational

Event ID 1 — Splashtop streamer has been opened.

Provider: Splashtop-Splashtop Streamer-Status
Channel: Operational

Description

Splashtop streamer has been opened.

Message #

Splashtop streamer has been opened.

App version: %1

Fields #

Name	Description
`Version_number` UnicodeString	—

Community Notes #

Legitimate RATs: a comprehensive forensic analysis of the usual suspects

References #

RULER Project https://ruler-project.github.io/ruler-project/RULER/remote/Splashtop

Event ID 2 — Splashtop streamer has been closed.

Provider: Splashtop-Splashtop Streamer-Status
Channel: Operational

Description

Splashtop streamer has been closed.

Message #

Splashtop streamer has been closed.

App version: %1

Fields #

Name	Description
`Version_number` UnicodeString	—

Community Notes #

Legitimate RATs: a comprehensive forensic analysis of the usual suspects

References #

RULER Project https://ruler-project.github.io/ruler-project/RULER/remote/Splashtop

Event ID 100 — The streamer was logged in.

Provider: Splashtop-Splashtop Streamer-Status
Channel: Operational

Description

The streamer was logged in.

Message #

The streamer was logged in.

App version: %1

Splashtop account: %2

Server Info: %3

Fields #

Name	Description
`Version_number` UnicodeString	—
`SPID` UnicodeString	—
`FQDN` UnicodeString	—

Community Notes #

Legitimate RATs: a comprehensive forensic analysis of the usual suspects

References #

RULER Project https://ruler-project.github.io/ruler-project/RULER/remote/Splashtop

Event ID 101 — The streamer was logged out.

Provider: Splashtop-Splashtop Streamer-Status
Channel: Operational

Description

The streamer was logged out.

Message #

The streamer was logged out.

App version: %1

Fields #

Name	Description
`Version_number` UnicodeString	—

Community Notes #

Legitimate RATs: a comprehensive forensic analysis of the usual suspects

References #

RULER Project https://ruler-project.github.io/ruler-project/RULER/remote/Splashtop

Event ID 200 — This computer was added to a Splashtop team.

Provider: Splashtop-Splashtop Streamer-Status
Channel: Operational

Description

This computer was added to a Splashtop team.

Message #

This computer was added to a Splashtop team.

App version: %1

Team owner: %2

Server Info: %3

Fields #

Name	Description
`Version_number` UnicodeString	—
`SPID` UnicodeString	—
`FQDN` UnicodeString	—

Community Notes #

Legitimate RATs: a comprehensive forensic analysis of the usual suspects

References #

RULER Project https://ruler-project.github.io/ruler-project/RULER/remote/Splashtop

Event ID 201 — This computer was removed from a Splashtop team.

Provider: Splashtop-Splashtop Streamer-Status
Channel: Operational

Description

This computer was removed from a Splashtop team.

Message #

This computer was removed from a Splashtop team.

App version: %1

Team owner: %2

Fields #

Name	Description
`Version_number` UnicodeString	—
`SPID` UnicodeString	—

Community Notes #

Legitimate RATs: a comprehensive forensic analysis of the usual suspects

References #

RULER Project https://ruler-project.github.io/ruler-project/RULER/remote/Splashtop

Event ID 300 — Splashtop streamer went online.

Provider: Splashtop-Splashtop Streamer-Status
Channel: Operational

Description

Splashtop streamer went online.

Message #

Splashtop streamer went online.

App version: %1

Server Info: %2

RMM ID: %3

Fields #

Name	Description
`Version_number` UnicodeString	—
`FQDN` UnicodeString	—
`RMM_ID` UnicodeString	—

Community Notes #

Legitimate RATs: a comprehensive forensic analysis of the usual suspects

References #

RULER Project https://ruler-project.github.io/ruler-project/RULER/remote/Splashtop

Event ID 301 — Splashtop streamer went offline.

Provider: Splashtop-Splashtop Streamer-Status
Channel: Operational

Description

Splashtop streamer went offline.

Message #

Splashtop streamer went offline.

App version: %1

Fields #

Name	Description
`Version_number` UnicodeString	—

Community Notes #

Legitimate RATs: a comprehensive forensic analysis of the usual suspects

References #

RULER Project https://ruler-project.github.io/ruler-project/RULER/remote/Splashtop

Event ID 400 — A remote user has renamed the computer.

Provider: Splashtop-Splashtop Streamer-Status
Channel: Operational

Description

A remote user has renamed the computer.

Message #

A remote user has renamed the computer.

App version: %1

From: %2

To: %3

Fields #

Name	Description
`Version_number` UnicodeString	—
`Previous_SRS_Name` UnicodeString	—
`SRS_Name` UnicodeString	—

Community Notes #

Legitimate RATs: a comprehensive forensic analysis of the usual suspects

References #

RULER Project https://ruler-project.github.io/ruler-project/RULER/remote/Splashtop

Event ID 401 — A remote user has restarted the streamer.

Provider: Splashtop-Splashtop Streamer-Status
Channel: Operational

Description

A remote user has restarted the streamer.

Message #

A remote user has restarted the streamer.

App version: %1

Fields #

Name	Description
`Version_number` UnicodeString	—

Community Notes #

Legitimate RATs: a comprehensive forensic analysis of the usual suspects

References #

RULER Project https://ruler-project.github.io/ruler-project/RULER/remote/Splashtop

Event ID 402 — A remote user has triggered Normal Reboot.

Provider: Splashtop-Splashtop Streamer-Status
Channel: Operational

Description

A remote user has triggered Normal Reboot.

Message #

A remote user has triggered Normal Reboot.

App version: %1

Fields #

Name	Description
`Version_number` UnicodeString	—

Community Notes #

Legitimate RATs: a comprehensive forensic analysis of the usual suspects

References #

RULER Project https://ruler-project.github.io/ruler-project/RULER/remote/Splashtop

Event ID 403 — A remote user has triggered Safe mode reboot.

Provider: Splashtop-Splashtop Streamer-Status
Channel: Operational

Description

A remote user has triggered Safe mode reboot.

Message #

A remote user has triggered Safe mode reboot.

App version: %1

Fields #

Name	Description
`Version_number` UnicodeString	—

Community Notes #

Legitimate RATs: a comprehensive forensic analysis of the usual suspects

References #

RULER Project https://ruler-project.github.io/ruler-project/RULER/remote/Splashtop