| Event Id | 4690 |
| Source | Microsoft-Windows-Security-Auditing |
| Description | An attempt was made to duplicate a handle to an object.An attempt was made to duplicate a handle to an object. Subject: Security ID:<Security ID> Account Name:<Account Name> Account Domain:<Domain name> Logon ID:<Logon ID> Source Handle Information: Source Handle ID:<Source Handle ID> Source Process ID:<Source Process ID> New Handle Information: Target Handle ID:<Target Handle ID> Target Process ID:<Target Process ID> |
| Event Information | Cause : This event is logged when an attempt was made to duplicate a handle to an object. Objects include users, computers, Organizational Units, shared folders, group and group policy. Resolution : No user action is required. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.