| ID | Event Description |
|---|---|
| 4656 | A handle to an object was requested Audit Failure, Audit Success, CJIS |
| 4657 | A registry value was modified Audit Success |
| 4658 | The handle to an object was closed Audit Success |
| 4659 | A handle to an object was requested with intent to delete |
| 4660 | An object was deleted Audit Success |
| 4661 | A handle to an object was requested Domain Controller, Audit Success, Audit Failure |
| 4662 | An operation was performed on an object Domain Controller, Audit Success, Audit Failure |
| 4663 | An attempt was made to access an object Audit Success, CJIS |
| 4670 | Permissions on an object were changed Audit Success |
| 4674 | An operation was attempted on a privileged object Audit Failure, Audit Success, CMMC L2, NIST800-171, NIST800-53 |