Undocumented functions of NTDLL

2OO1, 27 February


NtCloseObjectAuditAlarm
NtCloseObjectAuditAlarm

NTSYSAPI 
NTSTATUS
NTAPI

NtCloseObjectAuditAlarm(
IN PUNICODE_STRING SubsystemName, IN HANDLE ObjectHandle OPTIONAL, IN BOOLEAN GenerateOnClose );



Function NtCloseObjectAuditAlarm sends alarm to Event Log, section Security. Alarm informs about close user's created object.



Requirements:
Library: ntdll.lib
Privilege: SE_AUDIT_PRIVILEGE


See also:
NtAccessCheckAndAuditAlarm
NtDeleteObjectAuditAlarm
NtOpenObjectAuditAlarm