| Details | |
| Product: | Windows Operating System |
| Event ID: | 561 |
| Source: | Security |
| Version: | 5.0 |
| Component: | Security Event Log |
| Symbolic Name: | SE_AUDITID_CREATE_HANDLE |
| Message: | Handle Allocated: Handle ID: %1 Operation ID: {%2,%3} Process ID: %4 |
| Explanation | |
|
This event record indicates that a handle to an object has been opened. This event is only generated for handles that caused an audit to be generated when opened. |
|