System32
Events
Scripts
Codes
GeoIP
Tools
Audit Category
Object Access
(2)
Audit Subcategory
Handle Manipulation
(2)
File System
(1)
Kernel Object
(1)
Registry
(1)
Removable Storage
(1)
Operating Systems
Windows 10
(2)
Windows 2008
(2)
Windows 2008 R2
(2)
Windows 2012
(2)
Windows 2012 R2
(2)
Windows 2016
(2)
Windows 2019
(2)
Windows 7
(2)
Windows 8
(2)
Windows 8.1
(2)
Windows Vista
(2)
Tags
Audit Success
(1)
ID
Event Description
4658
The handle to an object was closed
4690
An attempt was made to duplicate a handle to an object