EventSentry
  • System32
  • Events
  • Compliance
  • Validator
  • TLS/SSL
  • Codes
  • GeoIP
  • Tools







Audit Category
  • Object Access (7)
  • DS Access (2)
  • Privilege Use (1)
Audit Subcategory
  • File System (6)
  • Registry (6)
  • Kernel Object (4)
  • Removable Storage (3)
  • Directory Service Access (2)
  • Authentication Policy Change (1)
  • Authorization Policy Change (1)
  • Handle Manipulation (1)
  • SAM (1)
  • Sensitive Privilege Use (1)
Operating Systems
  • Windows 10 (10)
  • Windows 2008 (10)
  • Windows 2008 R2 (10)
  • Windows 2012 (10)
  • Windows 2012 R2 (10)
  • Windows 2016 (10)
  • Windows 2019 (10)
  • Windows 7 (10)
  • Windows 8 (10)
  • Windows 8.1 (10)
  • Windows Vista (9)
Tags
  • Audit Success (9)
  • Audit Failure (4)
  • CJIS (2)
  • Domain Controller (2)
Auditing
  • Conditional (2)
  • Rarely (2)
  • Always (1)
  • Off (1)
Volume
  • High (3)
  • Very high (3)
  • Medium (1)
EventSentry
  • All events
ID Event Description
4656 A handle to an object was requested
Audit Failure, Audit Success, CJIS
4657 A registry value was modified
Audit Success
4658 The handle to an object was closed
Audit Success
4659 A handle to an object was requested with intent to delete
4660 An object was deleted
Audit Success
4661 A handle to an object was requested
Domain Controller, Audit Success, Audit Failure
4662 An operation was performed on an object
Domain Controller, Audit Success, Audit Failure
4663 An attempt was made to access an object
Audit Success, CJIS
4670 Permissions on an object were changed
Audit Success
4674 An operation was attempted on a privileged object
Audit Failure, Audit Success



© netikus.net ltd 2002-2022 | EventSentry | Event Log Messages | Privacy Policy