[MSDN Library June 1998] Process IDs and Handle IDs of Audit Events (52.3511904761905%)
MSDN Library Visual Studio 6.0 > Windows Resource Kits > Windows NT 3.51 Resource Kit > Windows NT Resource Kit Volume 1: Resource Guide > Windows NT Security Model > Auditing Security Events