1 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iSystem_SecurityStateChange |
Int32 |
100 |
0x00000064 |
100 |
|
|
System.Int32 |
iSystem_SecurityStateChange = SE_ADT_POLICY_AUDIT_EVENT_TYPE_EX_BEGIN,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(881,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
2 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iSystem_SecuritySubsystemExtension |
Int32 |
101 |
0x00000065 |
101 |
|
|
System.Int32 |
iSystem_SecuritySubsystemExtension,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(882,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
3 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iSystem_Integrity |
Int32 |
102 |
0x00000066 |
102 |
|
|
System.Int32 |
iSystem_Integrity,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(883,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
4 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iSystem_IPSecDriverEvents |
Int32 |
103 |
0x00000067 |
103 |
|
|
System.Int32 |
iSystem_IPSecDriverEvents,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(884,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
5 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iSystem_Others |
Int32 |
104 |
0x00000068 |
104 |
|
|
System.Int32 |
iSystem_Others,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(885,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
6 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iLogon_Logon |
Int32 |
105 |
0x00000069 |
105 |
|
|
System.Int32 |
iLogon_Logon,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(887,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
7 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iLogon_Logoff |
Int32 |
106 |
0x0000006A |
106 |
|
|
System.Int32 |
iLogon_Logoff,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(888,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
8 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iLogon_AccountLockout |
Int32 |
107 |
0x0000006B |
107 |
|
|
System.Int32 |
iLogon_AccountLockout,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(889,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
9 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iLogon_IPSecMainMode |
Int32 |
108 |
0x0000006C |
108 |
|
|
System.Int32 |
iLogon_IPSecMainMode,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(890,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
10 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iLogon_SpecialLogon |
Int32 |
109 |
0x0000006D |
109 |
|
|
System.Int32 |
iLogon_SpecialLogon,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(891,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
11 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iLogon_IPSecQuickMode |
Int32 |
110 |
0x0000006E |
110 |
|
|
System.Int32 |
iLogon_IPSecQuickMode,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(892,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
12 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iLogon_IPSecUsermode |
Int32 |
111 |
0x0000006F |
111 |
|
|
System.Int32 |
iLogon_IPSecUsermode,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(893,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
13 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iLogon_Others |
Int32 |
112 |
0x00000070 |
112 |
|
|
System.Int32 |
iLogon_Others,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(894,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
14 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iLogon_NPS |
Int32 |
113 |
0x00000071 |
113 |
|
|
System.Int32 |
iLogon_NPS,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(895,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
15 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iLogon_Claims |
Int32 |
114 |
0x00000072 |
114 |
|
|
System.Int32 |
iLogon_Claims,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(896,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
16 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iLogon_Groups |
Int32 |
115 |
0x00000073 |
115 |
|
|
System.Int32 |
iLogon_Groups,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(897,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
17 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iObjectAccess_FileSystem |
Int32 |
116 |
0x00000074 |
116 |
|
|
System.Int32 |
iObjectAccess_FileSystem,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(899,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
18 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iObjectAccess_Registry |
Int32 |
117 |
0x00000075 |
117 |
|
|
System.Int32 |
iObjectAccess_Registry,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(900,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
19 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iObjectAccess_Kernel |
Int32 |
118 |
0x00000076 |
118 |
|
|
System.Int32 |
iObjectAccess_Kernel,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(901,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
20 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iObjectAccess_Sam |
Int32 |
119 |
0x00000077 |
119 |
|
|
System.Int32 |
iObjectAccess_Sam,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(902,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
21 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iObjectAccess_Other |
Int32 |
120 |
0x00000078 |
120 |
|
|
System.Int32 |
iObjectAccess_Other,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(903,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
22 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iObjectAccess_CertificationAuthority |
Int32 |
121 |
0x00000079 |
121 |
|
|
System.Int32 |
iObjectAccess_CertificationAuthority,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(904,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
23 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iObjectAccess_ApplicationGenerated |
Int32 |
122 |
0x0000007A |
122 |
|
|
System.Int32 |
iObjectAccess_ApplicationGenerated,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(905,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
24 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iObjectAccess_HandleBasedAudits |
Int32 |
123 |
0x0000007B |
123 |
|
|
System.Int32 |
iObjectAccess_HandleBasedAudits,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(906,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
25 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iObjectAccess_Share |
Int32 |
124 |
0x0000007C |
124 |
|
|
System.Int32 |
iObjectAccess_Share,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(907,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
26 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iObjectAccess_FirewallPacketDrops |
Int32 |
125 |
0x0000007D |
125 |
|
|
System.Int32 |
iObjectAccess_FirewallPacketDrops,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(908,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
27 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iObjectAccess_FirewallConnection |
Int32 |
126 |
0x0000007E |
126 |
|
|
System.Int32 |
iObjectAccess_FirewallConnection,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(909,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
28 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iObjectAccess_DetailedFileShare |
Int32 |
127 |
0x0000007F |
127 |
|
|
System.Int32 |
iObjectAccess_DetailedFileShare,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(910,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
29 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iObjectAccess_RemovableStorage |
Int32 |
128 |
0x00000080 |
-128 |
|
|
System.Int32 |
iObjectAccess_RemovableStorage,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(911,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
30 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iObjectAccess_CbacStaging |
Int32 |
129 |
0x00000081 |
-127 |
|
|
System.Int32 |
iObjectAccess_CbacStaging,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(912,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
31 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iPrivilegeUse_Sensitive |
Int32 |
130 |
0x00000082 |
-126 |
|
|
System.Int32 |
iPrivilegeUse_Sensitive,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(914,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
32 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iPrivilegeUse_NonSensitive |
Int32 |
131 |
0x00000083 |
-125 |
|
|
System.Int32 |
iPrivilegeUse_NonSensitive,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(915,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
33 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iPrivilegeUse_Others |
Int32 |
132 |
0x00000084 |
-124 |
|
|
System.Int32 |
iPrivilegeUse_Others,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(916,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
34 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iDetailedTracking_ProcessCreation |
Int32 |
133 |
0x00000085 |
-123 |
|
|
System.Int32 |
iDetailedTracking_ProcessCreation,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(918,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
35 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iDetailedTracking_ProcessTermination |
Int32 |
134 |
0x00000086 |
-122 |
|
|
System.Int32 |
iDetailedTracking_ProcessTermination,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(919,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
36 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iDetailedTracking_DpapiActivity |
Int32 |
135 |
0x00000087 |
-121 |
|
|
System.Int32 |
iDetailedTracking_DpapiActivity,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(920,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
37 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iDetailedTracking_RpcCall |
Int32 |
136 |
0x00000088 |
-120 |
|
|
System.Int32 |
iDetailedTracking_RpcCall,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(921,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
38 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iDetailedTracking_PnpActivity |
Int32 |
137 |
0x00000089 |
-119 |
|
|
System.Int32 |
iDetailedTracking_PnpActivity,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(922,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
39 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iDetailedTracking_TokenRightAdjusted |
Int32 |
138 |
0x0000008A |
-118 |
|
|
System.Int32 |
iDetailedTracking_TokenRightAdjusted,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(923,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
40 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iPolicyChange_AuditPolicy |
Int32 |
139 |
0x0000008B |
-117 |
|
|
System.Int32 |
iPolicyChange_AuditPolicy,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(925,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
41 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iPolicyChange_AuthenticationPolicy |
Int32 |
140 |
0x0000008C |
-116 |
|
|
System.Int32 |
iPolicyChange_AuthenticationPolicy,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(926,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
42 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iPolicyChange_AuthorizationPolicy |
Int32 |
141 |
0x0000008D |
-115 |
|
|
System.Int32 |
iPolicyChange_AuthorizationPolicy,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(927,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
43 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iPolicyChange_MpsscvRulePolicy |
Int32 |
142 |
0x0000008E |
-114 |
|
|
System.Int32 |
iPolicyChange_MpsscvRulePolicy,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(928,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
44 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iPolicyChange_WfpIPSecPolicy |
Int32 |
143 |
0x0000008F |
-113 |
|
|
System.Int32 |
iPolicyChange_WfpIPSecPolicy,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(929,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
45 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iPolicyChange_Others |
Int32 |
144 |
0x00000090 |
-112 |
|
|
System.Int32 |
iPolicyChange_Others,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(930,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
46 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iAccountManagement_UserAccount |
Int32 |
145 |
0x00000091 |
-111 |
|
|
System.Int32 |
iAccountManagement_UserAccount,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(932,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
47 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iAccountManagement_ComputerAccount |
Int32 |
146 |
0x00000092 |
-110 |
|
|
System.Int32 |
iAccountManagement_ComputerAccount,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(933,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
48 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iAccountManagement_SecurityGroup |
Int32 |
147 |
0x00000093 |
-109 |
|
|
System.Int32 |
iAccountManagement_SecurityGroup,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(934,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
49 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iAccountManagement_DistributionGroup |
Int32 |
148 |
0x00000094 |
-108 |
|
|
System.Int32 |
iAccountManagement_DistributionGroup,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(935,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
50 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iAccountManagement_ApplicationGroup |
Int32 |
149 |
0x00000095 |
-107 |
|
|
System.Int32 |
iAccountManagement_ApplicationGroup,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(936,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
51 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iAccountManagement_Others |
Int32 |
150 |
0x00000096 |
-106 |
|
|
System.Int32 |
iAccountManagement_Others,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(937,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
52 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iDSAccess_DSAccess |
Int32 |
151 |
0x00000097 |
-105 |
|
|
System.Int32 |
iDSAccess_DSAccess,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(939,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
53 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iDSAccess_AdAuditChanges |
Int32 |
152 |
0x00000098 |
-104 |
|
|
System.Int32 |
iDSAccess_AdAuditChanges,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(940,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
54 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iDS_Replication |
Int32 |
153 |
0x00000099 |
-103 |
|
|
System.Int32 |
iDS_Replication,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(941,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
55 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iDS_DetailedReplication |
Int32 |
154 |
0x0000009A |
-102 |
|
|
System.Int32 |
iDS_DetailedReplication,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(942,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
56 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iAccountLogon_CredentialValidation |
Int32 |
155 |
0x0000009B |
-101 |
|
|
System.Int32 |
iAccountLogon_CredentialValidation,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(944,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
57 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iAccountLogon_Kerberos |
Int32 |
156 |
0x0000009C |
-100 |
|
|
System.Int32 |
iAccountLogon_Kerberos,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(945,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
58 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iAccountLogon_Others |
Int32 |
157 |
0x0000009D |
-99 |
|
|
System.Int32 |
iAccountLogon_Others,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(946,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
59 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iAccountLogon_KerbCredentialValidation |
Int32 |
158 |
0x0000009E |
-98 |
|
|
System.Int32 |
iAccountLogon_KerbCredentialValidation,
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(947,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|
60 |
9.648586 |
POLICY_AUDIT_EVENT_TYPE_EX::iUnknownSubCategory |
Int32 |
999 |
0x000003E7 |
999 |
|
|
System.Int32 |
iUnknownSubCategory = 999
|
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22621.0\um\ntlsa.h(949,0) |
- If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
|