An object that contains security information for a process or thread, including the identity and privileges of the user account that is associated with the process or thread.