SeAuditingFileOrGlobalEvents - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers 
// ntifs.h

BOOLEAN SeAuditingFileOrGlobalEvents(
  [in] BOOLEAN                   AccessGranted,
  [in] PSECURITY_DESCRIPTOR      SecurityDescriptor,
  [in] PSECURITY_SUBJECT_CONTEXT SubjectSecurityContext
);
View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Edit description on GitHub

Windows Driver Kit DDI reference (nf-ntifs-seauditingfileorglobalevents)

SeAuditingFileOrGlobalEvents function

Description

The SeAuditingFileOrGlobalEvents routine determines whether file or global events are currently being audited.

Parameters

AccessGranted [in]

Set to TRUE if the access attempt was successful, FALSE otherwise.

SecurityDescriptor [in]

Pointer to the security descriptor protecting the object being accessed.

SubjectSecurityContext [in]

Pointer to the subject's captured security context.

Return value

SeAuditingFileOrGlobalEvents returns TRUE if file or global events are currently being audited, FALSE otherwise.

Remarks

For more information about security and access control, see Windows security model for driver developers and the documentation on these topics in the Windows SDK.

See also

SECURITY_DESCRIPTOR

SECURITY_SUBJECT_CONTEXT

SeAuditingFileEvents

SeDeleteObjectAuditAlarm

SeOpenObjectAuditAlarm

SeOpenObjectForDeleteAuditAlarm

View the official Windows Driver Kit DDI reference

Edit description on GitHub