592
Security
A new process has been created:
New Process ID: 860
Image File Name: calc.exe
Creator Process ID: 3492
User Name: MyUser
Domain: NETIKUS
Logon ID: (0x0,0x87F44D2)
The OS logs this event when a new process has started. Process tracking will need to be turned on in the audit policy for those events to be logged to the event log.