| Event Id | 593 |
| Source | Security |
| Description | A process has exited: Process ID: < Process ID> Image File Name: < Image File Name> User Name: < User Name> Domain: < Domain> Logon ID: < Logon ID> |
| Event Information | According to Microsoft : Cause : A user or service has successfully closed a program. This message corresponds to a Security 592 message, which indicates that the program was started. Associated messages have the same Process ID number. Process ID numbers are reused, so a given instance of Security 593 message only corresponds to the most recent Security 592 message with the same Process ID number. Resolution : No user action is required. |
| Reference Links | Event ID 593 from Source Security Alternate Event ID in Vista and Windows Server 2008 is 4689. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.