A new JDK Flight Recorder (JFR) event has been added to monitor deserialization of objects. When JFR is enabled and the JFR configuration includes deserialization events, JFR will emit an event whenever the running program attempts to deserialize an object. The deserialization event is named `java/deserialization`, and it is disabled by default. The deserialization event contains information that is used by the serialization filter mechanism. Additionally, if a filter is enabled, the JFR event indicates whether the filter accepted or rejected deserialization of the object.

The new Deserialization Event captures:

* Whether a serialization filter is configured or not.
* The serialization filter status, if one is configured.
* The class of the object being deserialized.
* The number of array elements when deserializing an array.
* The current graph depth.
* The current number of object references.
* The current number of bytes in the stream that have been consumed.
* The exception type and message, if thrown by the serialization filter.


Refer to [Context-Specific Deserialization Filter](https://bugs.openjdk.org/browse/JDK-8268701) and [Serialization Filtering Guide](https://docs.oracle.com/en/java/javase/11/core/serialization-filtering1.html#GUID-3ECB288D-E5BD-4412-892F-E9BB11D4C98A) for details.