[MSDN Library April 2000] Process IDs and Handle IDs of Audit Events (52.3511904761905%)
MSDN Library - April 2000 > Windows Resource Kits > Windows NT 3.51 Resource Kit > Windows NT Resource Kit Volume 1: Resource Guide > Windows NT Security Model > Auditing Security Events