Event ID:
5039
Category:
Object Access
Subcategory:
Registry
Supported on:
Windows Vista, Windows Server 2008
A registry key was virtualized.
Subject:
Security ID: %1
Account Name: %2
Account Domain: %3
Logon ID: %4
Object:
Key Name: %5
Virtual Key Name: %6
Process Information:
Process ID: %7
Process Name: %8