| Event Id | 4658 |
| Source | Microsoft-Windows-Security-Auditing |
| Description | The handle to an object was closed. Subject : Security ID:<Security ID> Account Name:<Account Name> Account Domain:<Domain name> Logon ID:<Logon ID> Object: Object Server:<Object Server> Handle ID: <Handle ID> Process Information: Process ID: <Process ID> Process Name:<Process Name> |
| Event Information | Cause : This event is logged after successfully opening an object, a program eventually closes.It determines how long the object was open. Resolution :This is an informarion event and no user action is required. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.