Event ID:
4690
Category:
Object Access
Subcategory:
Handle Manipulation
Supported on:
Windows Vista, Windows Server 2008
An attempt was made to duplicate a handle to an object.
Subject:
Security ID: %1
Account Name: %2
Account Domain: %3
Logon ID: %4
Source Handle Information:
Source Handle ID: %5
Source Process ID: %6
New Handle Information:
Target Handle ID: %7
Target Process ID: %8