SeDeleteObjectAuditAlarmWithTransaction
VOID __stdcall SeDeleteObjectAuditAlarmWithTransaction(VOID *Object, VOID *Handle, _GUID *TransactionId){
_SECURITY_SUBJECT_CONTEXT SubjectSecurityContext;
memset(&SubjectSecurityContext, 0, sizeof(SubjectSecurityContext));
SeCaptureSubjectContext((INT64)&SubjectSecurityContext);
SepAdtDeleteObjectAuditAlarm(
(_UNICODE_STRING *)&SeSubsystemName,
Handle,
&SubjectSecurityContext,
Object,
TransactionId,
1u);
SeReleaseSubjectContext(&SubjectSecurityContext);
}Referenced by:
NtDeleteKey
NtMakeTemporaryObject
SeDeleteObjectAuditAlarm