SeAuditingFileOrGlobalEvents - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
// ntifs.h
BOOLEAN SeAuditingFileOrGlobalEvents(
[in] BOOLEAN AccessGranted,
[in] PSECURITY_DESCRIPTOR SecurityDescriptor,
[in] PSECURITY_SUBJECT_CONTEXT SubjectSecurityContext
);
View the official Windows Driver Kit DDI referenceNo description available.
The SeAuditingFileOrGlobalEvents routine determines whether file or global events are currently being audited.
AccessGranted [in]Set to TRUE if the access attempt was successful, FALSE otherwise.
SecurityDescriptor [in]Pointer to the security descriptor protecting the object being accessed.
SubjectSecurityContext [in]Pointer to the subject's captured security context.
SeAuditingFileOrGlobalEvents returns TRUE if file or global events are currently being audited, FALSE otherwise.
For more information about security and access control, see Windows security model for driver developers and the documentation on these topics in the Windows SDK.
SeOpenObjectForDeleteAuditAlarm