2OO1, 27 February
NtCloseObjectAuditAlarm
NtCloseObjectAuditAlarm
NTSYSAPI
NTSTATUS
NTAPI
NtCloseObjectAuditAlarm(
IN PUNICODE_STRING SubsystemName,
IN HANDLE ObjectHandle OPTIONAL,
IN BOOLEAN GenerateOnClose );
Function NtCloseObjectAuditAlarm sends alarm to Event
Log, section Security. Alarm informs about close user's created
object.
- SubsystemName This string is sent to
Event Log as the first parameter.
- ObjectHandle HANDLE to object,
or NULL value.
- GenerateOnClose If set, event is
generated.
- Documented by:
- Tomasz Nowak
Requirements:
- Library: ntdll.lib
- Privilege: SE_AUDIT_PRIVILEGE
See also:
-
NtAccessCheckAndAuditAlarm
-
NtDeleteObjectAuditAlarm
-
NtOpenObjectAuditAlarm