IoCreateNotificationEvent

is it required to close the handle when we create notification event ?

:thinking:

Uhhh... Yes? When you're done with any handle, you're responsible for closing it. It doesn't really depend on what it's a handle TO. User mode, kernel mode, same thing.