2.9 Security Stream Structure

The data portion of a SECURITY_DATA backup stream MUST contain a SECURITY_DESCRIPTOR. For more information, see [MS-DTYP] section 2.4.6.