Splashtop Remote

Splashtop Remote is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.

Details

Installation Paths

strwinclt.exe
Splashtop_Streamer_Windows*.exe
SplashtopSOS.exe
sragent.exe
srmanager.exe
srserver.exe
srservice.exe

Forensic Artifacts

Network Artifacts

Detections

• Detects potential network activity of Splashtop Remote RMM tool
  • Sigma Rule (opens in a new tab)
• Detects potential processes activity of Splashtop Remote RMM tool
  • Sigma Rule (opens in a new tab)

References

• https://support-splashtopbusiness.splashtop.com/hc/en-us/articles/115001811966-What-are-the-Firewall-Exceptions-and-IP-addresses-of-Splashtop-servers-Services (opens in a new tab)