The creation of an java.io.ObjectInputStream is an interesting event and should be added to JFR events. It can help to identify and categorize uses of de-serialization.