Event ID - 567

Event Id567
DescriptionObject Access Attempt:
      Object Server: <Object Server>
      Handle ID: <Handle ID>
      Object Type: <Object Type>
      Process ID: <Process ID>
      Image File Name: <Image File Name>
      Accesses: ReadData (or ListDirectory)
Access Mask: <Access Mask>     

Event InformationExplanation :
An object was accessed using a handle. This event is associated with the Security 560 event, which indicates that a handle was successfully created for the object. The Security 567 event is logged only when the corresponding Security 560 event indicates success.

The Handle ID is a unique number that is assigned by the operating system when a request is made to access an object. Multiple requests to access the same object may share a Handle ID. The Handle ID is valid for that object from the time that the Security 560 event is logged until the Security 562 event is logged.
User Action :
No user action is required.
Reference LinksEvent ID 567 rom Source Security

Alternate Event ID in Vista and Windows Server 2008 is 4663.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.