SeOpenObjectAuditAlarm
VOID __stdcall SeOpenObjectAuditAlarm(
_UNICODE_STRING *ObjectTypeName,
VOID *Object,
_UNICODE_STRING *AbsoluteObjectName,
VOID *SecurityDescriptor,
_ACCESS_STATE *AccessState,
UINT8 ObjectCreated,
UINT8 AccessGranted,
CHAR AccessMode,
UINT8 *GenerateOnClose){
if( AccessMode )
SeOpenObjectAuditAlarmWithTransaction(
ObjectTypeName,
Object,
AbsoluteObjectName,
SecurityDescriptor,
AccessState,
ObjectCreated,
AccessGranted,
AccessMode,
0i64,
GenerateOnClose);
}Referenced by:
CmpCheckKeyBodyAccess
IopCreateSecurityCheck
IopParseDevice
ObCheckObjectAccess