Windows SecurityObject Access

Event 4664: An attempt was made to create a hard link.

An attempt was made to create a hard link.

Technical Details

Windows Security Source

Event ID: 4664

Windows Security- Object Access

Event Description

An attempt was made to create a hard link.

Key Log Fields

  • SubjectUserName - Account that attempted to create hard link
  • SubjectDomainName - Domain of the account
  • SubjectLogonId - Logon ID for correlation
  • FileName - Original file name
  • LinkName - Hard link name to be created
  • ProcessName - Process that attempted the operation
  • ProcessId - Process ID

Contents