| Event Id | 4689 |
| Source | Microsoft-Windows-Security-Auditing |
| Description | A process has exited. Subject: Security ID:<Security ID> Account Name:<Account Name> Account Domain:<Domain Name> Logon ID:<Logon ID> Process Information: Process ID: <Process ID> Process Name:<ProcessName> Exit Status: <Exit Status> |
| Event Information | Cause : This Event is logged when documents a process ends. Resolution : This is an information event and no user action is required. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.