| ID | Event Description |
|---|---|
| 4656 |
A handle to an object was requested
Audit Failure, Audit Success, CJIS
|
| 4657 |
A registry value was modified
Audit Success
|
| 4658 |
The handle to an object was closed
Audit Success
|
| 4660 |
An object was deleted
Audit Success
|
| 4663 |
An attempt was made to access an object
Audit Success, CJIS
|
| 4670 |
Permissions on an object were changed
Audit Success
|
| 5039 |
A registry key was virtualized.
|