Skip to content

Windows Security event 4688

Named by 2 kept items in this workspace.

Search every workspace for Windows Security event 4688. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • lee1981 (@lee1981b) on X
    article2026-10-21It is written here as Windows Security event 4688: process creation, needs process auditing and separate policy for command-line inclusion..
  • lee1981 (@lee1981b) on X
    advisory2026-10-19It is written here as Windows Security event 4688 (process creation): host evidence, useful only if process auditing is enabled; command-line detail needs separate configuration..

    process creation

All technologies in this workspace.