detection.wiki

Splashtop-Splashtop Streamer-Status › Event 400

Event ID 400 — A remote user has renamed the computer.

Provider
Splashtop-Splashtop Streamer-Status
Channel
Operational

Description

A remote user has renamed the computer.

Message #

A remote user has renamed the computer.

App version: %1

From: %2

To: %3

Fields #

NameDescription
Version_number UnicodeString—
Previous_SRS_Name UnicodeString—
SRS_Name UnicodeString—

Community Notes #

Legitimate RATs: a comprehensive forensic analysis of the usual suspects

References #