Skip to main content

Windows security encyclopedia

#microsoft #windows #security

Search form

Search this site

You are here

Windows event ID encyclopedia
» Detailed Tracking

Process Creation

Policy path:

Computer Configuration\Windows Settings\Advanced Audit Policy Configuration\Detailed Tracking

Windows event ID 4688 - A new process has been created
Windows event ID 4696 - A primary token was assigned to process

‹ Windows event ID 4695 - Unprotection of auditable protected data was attempted up Windows event ID 4688 - A new process has been created ›

Related content

Navigation

Microsoft security bulletins

Windows event ID encyclopedia

Windows group policy encyclopedia

Windows services encyclopedia

© 2005-2017 - by Lode Vanstechelman - Contact - Privacy policy