Windows EventInformation
Windows Event ID 4912 – Microsoft-Windows-Kernel-General: Object Manager Symbolic Link Creation
Event ID 4912 logs when the Windows Object Manager creates symbolic links in the kernel namespace, typically during system startup or driver initialization processes.