| Event Id | 567 |
| Source | security |
| Description | Object Access Attempt: Object Server: <Object Server> Handle ID: <Handle ID> Object Type: <Object Type> Process ID: <Process ID> Image File Name: <Image File Name> Accesses: ReadData (or ListDirectory) Access Mask: <Access Mask> |
| Event Information | Explanation : An object was accessed using a handle. This event is associated with the Security 560 event, which indicates that a handle was successfully created for the object. The Security 567 event is logged only when the corresponding Security 560 event indicates success. The Handle ID is a unique number that is assigned by the operating system when a request is made to access an object. Multiple requests to access the same object may share a Handle ID. The Handle ID is valid for that object from the time that the Security 560 event is logged until the Security 562 event is logged. User Action : No user action is required. |
| Reference Links | Event ID 567 rom Source Security Alternate Event ID in Vista and Windows Server 2008 is 4663. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.