SeDeleteObjectAuditAlarmWithTransaction
VOID __stdcall SeDeleteObjectAuditAlarmWithTransaction(PVOID Object, PVOID Handle, GUID *TransactionId){
struct _SECURITY_SUBJECT_CONTEXT SubjectContext;
memset(&SubjectContext, 0, sizeof(SubjectContext));
SeCaptureSubjectContext(&SubjectContext);
SepAdtDeleteObjectAuditAlarm((UNICODE_STRING *)&SeSubsystemName, Handle, &SubjectContext, Object, TransactionId, 1u);
SeReleaseSubjectContext(&SubjectContext);
}Referenced by:
NtDeleteKey
NtMakeTemporaryObject
SeDeleteObjectAuditAlarm