Windows EventInformation
Windows Event ID 4932 – Microsoft-Windows-Security-Auditing: An attempt was made to access an object
Event ID 4932 logs when a process attempts to access a security-protected object. This audit event fires when object access auditing is enabled and helps track file, registry, or service access attempts.
