Windows SecurityObject Access

Event 4658: The handle to an object was closed.

The handle to an object was closed.

Technical Details

Windows Security Source

Event ID: 4658

Windows Security- Object Access

Event Description

The handle to an object was closed.

Key Log Fields

  • SubjectUserName - Account that closed the handle
  • SubjectDomainName - Domain of the account
  • SubjectLogonId - Logon ID for correlation
  • ObjectName - Name or path of the object
  • HandleId - Handle ID that was closed (correlates with 4656)
  • ProcessName - Process that closed the handle
  • ProcessId - Process ID

Contents