SeDeleteObjectAuditAlarm - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
// ntifs.h
VOID SeDeleteObjectAuditAlarm(
[in] PVOID Object,
[in] HANDLE Handle
);
View the official Windows Driver Kit DDI referenceNo description available.
The SeDeleteObjectAuditAlarm routine generates audit and alarm messages for an object that is marked for deletion.
Object [in]Address of the object.
Handle [in]A unique 32-bit value representing the client's handle to the object.
Callers of SeDeleteObjectAuditAlarm must have SeAuditPrivilege enabled. The test for this privilege is always performed against the primary token of the calling process, allowing the calling process to impersonate a client.
For more information about security and access control, see Windows security model for driver developers and the documentation on these topics in the Windows SDK.
SeOpenObjectForDeleteAuditAlarm