dissect.target.plugins.apps.remoteaccess.splashtop

Module Contents

Classes

SplashtopPlugin

Splashtop plugin.

Attributes

RE_TS

dissect.target.plugins.apps.remoteaccess.splashtop.RE_TS
class dissect.target.plugins.apps.remoteaccess.splashtop.SplashtopPlugin(target: dissect.target.target.Target)

Bases: dissect.target.plugins.apps.remoteaccess.remoteaccess.RemoteAccessPlugin

Splashtop plugin.

__namespace__ = 'splashtop'

Defines the plugin namespace.

RemoteAccessLogRecord
RemoteAccessFileTransferRecord
LOG_PATHS = ('sysvol/Program Files (x86)/Splashtop/Splashtop Remote/Server/log/SPLog.txt',)
log_files: set[dissect.target.helpers.fsutil.TargetPath]
check_compatible() → None

Perform a compatibility check with the target.

This function should return None if the plugin is compatible with the current target (self.target). For example, check if a certain file exists. Otherwise it should raise an UnsupportedPluginError.

Raises:

UnsupportedPluginError – If the plugin could not be loaded.

logs() → collections.abc.Iterator[RemoteAccessLogRecord]

Parse Splashtop log files.

Splashtop is a remote desktop application that can be used to get (persistent) access to a machine. It might be used in combination with Atera Management Agent.

References

filetransfer() → collections.abc.Iterator[RemoteAccessFileTransferRecord]

Parse Splashtop filetransfers.

Splashtop is a remote desktop application and can be used by adversaries to get (persistent) access to a machine. File transfers as logged in the generic logfile (SPLog.txt) show what files are downloaded to a system.