SeCloseObjectAuditAlarm

VOID __stdcall SeCloseObjectAuditAlarm(VOID *Object, VOID *Handle, UINT8 GenerateOnClose){
  _SECURITY_SUBJECT_CONTEXT SubjectSecurityContext; 

  if( GenerateOnClose )
  {
    memset(&SubjectSecurityContext, 0, sizeof(SubjectSecurityContext));
    SeCaptureSubjectContext((INT64)&SubjectSecurityContext);
    SepAdtCloseObjectAuditAlarm((_UNICODE_STRING *)&SeSubsystemName, Handle, &SubjectSecurityContext, Object, 1u);
    SeReleaseSubjectContext(&SubjectSecurityContext);
  }
}

Referenced by: