SeAuditingFileEvents - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
// ntifs.h
BOOLEAN SeAuditingFileEvents(
[in] BOOLEAN AccessGranted,
[in] PSECURITY_DESCRIPTOR SecurityDescriptor
);
View the official Windows Driver Kit DDI referenceNo description available.
The SeAuditingFileEvents routine determines whether file open events are currently being audited.
AccessGranted [in]Set to TRUE if the access attempt was successful, FALSE otherwise.
SecurityDescriptor [in]This parameter is ignored.
SeAuditingFileEvents returns TRUE if file open events are currently being audited, FALSE otherwise.
For more information about security and access control, see Windows security model for driver developers and the documentation on these topics in the Windows SDK.
SeOpenObjectForDeleteAuditAlarm