SeAuditingFileEvents function (ntifs.h)
The SeAuditingFileEvents routine determines whether file open events are currently being audited.
Syntax
BOOLEAN SeAuditingFileEvents(
[in] BOOLEAN AccessGranted,
[in] PSECURITY_DESCRIPTOR SecurityDescriptor
);
Parameters
[in] AccessGranted
Set to TRUE if the access attempt was successful, FALSE otherwise.
[in] SecurityDescriptor
This parameter is ignored.
Return value
SeAuditingFileEvents returns TRUE if file open events are currently being audited, FALSE otherwise.
Remarks
For more information about security and access control, see Windows security model for driver developers and the documentation on these topics in the Windows SDK.
Requirements
Requirement | Value |
---|---|
Target Platform | Universal |
Header | ntifs.h (include Ntifs.h) |
Library | NtosKrnl.lib |
DLL | NtosKrnl.exe |
IRQL | PASSIVE_LEVEL |
See also
Feedback
https://aka.ms/ContentUserFeedback.
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see:Submit and view feedback for