| ID | Event Description |
|---|---|
| 4656 | A handle to an object was requested Audit Failure, Audit Success, CJIS |
| 4658 | The handle to an object was closed Audit Success |
| 4659 | A handle to an object was requested with intent to delete |
| 4660 | An object was deleted Audit Success |
| 4663 | An attempt was made to access an object Audit Success, CJIS |
| 4664 | An attempt was made to create a hard link Audit Success |
| 4670 | Permissions on an object were changed Audit Success |
| 4985 | The state of a transaction has changed Audit Success |
| 5051 | A file was virtualized. |