Object Access Attempt: Object Server: %1 Handle ID: %2 Object Type: %3 Process ID: %4 Image File Name: %5 Accesses: %6 Access Mask: %7

Details
Product: Windows Operating System
Event ID: 567
Source: Security
Version: 5.0
Symbolic Name: SE_AUDITID_OBJECT_ACCESS
Message: Object Access Attempt:
Object Server: %1
Handle ID: %2
Object Type: %3
Process ID: %4
Image File Name: %5
Accesses: %6
Access Mask: %7
   
Explanation

An object was accessed using a handle. This event is associated with the Security 560 event, which indicates that a handle was successfully created for the object. The Security 567 event is logged only when the corresponding Security 560 event indicates success.

The Handle ID is a unique number that is assigned by the operating system when a request is made to access an object. Multiple requests to access the same object may share a Handle ID. The Handle ID is valid for that object from the time that the Security 560 event is logged until the Security 562 event is logged.

   
User Action

No user action is required.

Related:

Leave a Reply