A new process has been created: New Process ID: %1 Image File Name: %2 Creator Process ID: %3 User Name: %4 Domain: %5 Logon ID: %6

Details
Product: Windows Operating System
Event ID: 592
Source: Security
Version: 5.0
Component: Security Event Log
Symbolic Name: SE_AUDITID_PROCESS_CREATED
Message: A new process has been created: New Process ID: %1 Image File Name: %2 Creator Process ID: %3 User Name: %4 Domain: %5 Logon ID: %6
   
Explanation

A user or service started a program successfully. When this program is closed, a corresponding Security 593 message is logged, which indicates that the program was successfully closed and is no longer running. Associated messages have the same Process ID number.

   
User Action

No user action is required.

Related:

Leave a Reply