SeDeleteObjectAuditAlarm - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers 
// ntifs.h

VOID SeDeleteObjectAuditAlarm(
  [in] PVOID  Object,
  [in] HANDLE Handle
);
View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Edit description on GitHub

Windows Driver Kit DDI reference (nf-ntifs-sedeleteobjectauditalarm)

SeDeleteObjectAuditAlarm function

Description

The SeDeleteObjectAuditAlarm routine generates audit and alarm messages for an object that is marked for deletion.

Parameters

Object [in]

Address of the object.

Handle [in]

A unique 32-bit value representing the client's handle to the object.

Remarks

Callers of SeDeleteObjectAuditAlarm must have SeAuditPrivilege enabled. The test for this privilege is always performed against the primary token of the calling process, allowing the calling process to impersonate a client.

For more information about security and access control, see Windows security model for driver developers and the documentation on these topics in the Windows SDK.

See also

SeAuditingFileEvents

SeAuditingFileOrGlobalEvents

SeOpenObjectAuditAlarm

SeOpenObjectForDeleteAuditAlarm

View the official Windows Driver Kit DDI reference

Edit description on GitHub