📄 lmaudit.h
字号:
#ifndef _LMAUDIT_H#define _LMAUDIT_H#ifdef __cplusplusextern "C" {#endif#define REVISED_AUDIT_ENTRY_STRUCT#define LOGFLAGS_FORWARD 0#define LOGFLAGS_BACKWARD 1#define LOGFLAGS_SEEK 2#define ACTION_LOCKOUT 0#define ACTION_ADMINUNLOCK 1#define AE_GUEST 0#define AE_USER 1#define AE_ADMIN 2#define AE_NORMAL 0#define AE_USERLIMIT 0#define AE_GENERAL 0#define AE_ERROR 1#define AE_SESSDIS 1#define AE_BADPW 1#define AE_AUTODIS 2#define AE_UNSHARE 2#define AE_ADMINPRIVREQD 2#define AE_ADMINDIS 3#define AE_NOACCESSPERM 3#define AE_ACCRESTRICT 4#define AE_NORMAL_CLOSE 0#define AE_SES_CLOSE 1#define AE_ADMIN_CLOSE 2#define AE_LIM_UNKNOWN 0#define AE_LIM_LOGONHOURS 1#define AE_LIM_EXPIRED 2#define AE_LIM_INVAL_WKSTA 3#define AE_LIM_DISABLED 4#define AE_LIM_DELETED 5#define AE_MOD 0#define AE_DELETE 1#define AE_ADD 2#define AE_UAS_USER 0#define AE_UAS_GROUP 1#define AE_UAS_MODALS 2#define SVAUD_SERVICE 1#define SVAUD_GOODSESSLOGON 6#define SVAUD_BADSESSLOGON 24#define SVAUD_SESSLOGON (SVAUD_GOODSESSLOGON|SVAUD_BADSESSLOGON)#define SVAUD_GOODNETLOGON 96#define SVAUD_BADNETLOGON 384#define SVAUD_NETLOGON (SVAUD_GOODNETLOGON|SVAUD_BADNETLOGON)#define SVAUD_LOGON (SVAUD_NETLOGON|SVAUD_SESSLOGON)#define SVAUD_GOODUSE 0x600#define SVAUD_BADUSE 0x1800#define SVAUD_USE (SVAUD_GOODUSE|SVAUD_BADUSE)#define SVAUD_USERLIST 8192#define SVAUD_PERMISSIONS 16384#define SVAUD_RESOURCE 32768#define SVAUD_LOGONLIM 65536#define AA_AUDIT_ALL 1#define AA_A_OWNER 4#define AA_CLOSE 8#define AA_S_OPEN 16#define AA_S_WRITE 32#define AA_S_CREATE 32#define AA_S_DELETE 64#define AA_S_ACL 128#define AA_S_ALL 253#define AA_F_OPEN 256#define AA_F_WRITE 512#define AA_F_CREATE 512#define AA_F_DELETE 1024#define AA_F_ACL 2048#define AA_F_ALL (AA_F_OPEN|AA_F_WRITE|AA_F_DELETE|AA_F_ACL)#define AA_A_OPEN 2048#define AA_A_WRITE 4096#define AA_A_CREATE 8192#define AA_A_DELETE 16384#define AA_A_ACL 32768#define AA_A_ALL (AA_F_OPEN|AA_F_WRITE|AA_F_DELETE|AA_F_ACL)typedef struct _AUDIT_ENTRY { DWORD ae_len; DWORD ae_reserved; DWORD ae_time; DWORD ae_type; DWORD ae_data_offset; DWORD ae_data_size;} AUDIT_ENTRY,*PAUDIT_ENTRY,*LPAUDIT_ENTRY;typedef struct _HLOG { DWORD time; DWORD last_flags; DWORD offset; DWORD rec_offset;} HLOG,*PHLOG,*LPHLOG;typedef struct _AE_SRVSTATUS { DWORD ae_sv_status;} AE_SRVSTATUS,*PAE_SRVSTATUS,*LPAE_SRVSTATUS;typedef struct _AE_SESSLOGON { DWORD ae_so_compname; DWORD ae_so_username; DWORD ae_so_privilege;} AE_SESSLOGON,*PAE_SESSLOGON,*LPAE_SESSLOGON;typedef struct _AE_SESSLOGOFF { DWORD ae_sf_compname; DWORD ae_sf_username; DWORD ae_sf_reason;} AE_SESSLOGOFF,*PAE_SESSLOGOFF,*LPAE_SESSLOGOFF;typedef struct _AE_SESSPWERR { DWORD ae_sp_compname; DWORD ae_sp_username;} AE_SESSPWERR,*PAE_SESSPWERR,*LPAE_SESSPWERR;typedef struct _AE_CONNSTART { DWORD ae_ct_compname; DWORD ae_ct_username; DWORD ae_ct_netname; DWORD ae_ct_connid;} AE_CONNSTART,*PAE_CONNSTART,*LPAE_CONNSTART;typedef struct _AE_CONNSTOP { DWORD ae_cp_compname; DWORD ae_cp_username; DWORD ae_cp_netname; DWORD ae_cp_connid; DWORD ae_cp_reason;} AE_CONNSTOP,*PAE_CONNSTOP,*LPAE_CONNSTOP;typedef struct _AE_CONNREJ { DWORD ae_cr_compname; DWORD ae_cr_username; DWORD ae_cr_netname; DWORD ae_cr_reason;} AE_CONNREJ,*PAE_CONNREJ,*LPAE_CONNREJ;typedef struct _AE_RESACCESS { DWORD ae_ra_compname; DWORD ae_ra_username; DWORD ae_ra_resname; DWORD ae_ra_operation; DWORD ae_ra_returncode; DWORD ae_ra_restype; DWORD ae_ra_fileid;} AE_RESACCESS,*PAE_RESACCESS,*LPAE_RESACCESS;typedef struct _AE_RESACCESSREJ { DWORD ae_rr_compname; DWORD ae_rr_username; DWORD ae_rr_resname; DWORD ae_rr_operation;} AE_RESACCESSREJ,*PAE_RESACCESSREJ,*LPAE_RESACCESSREJ;typedef struct _AE_CLOSEFILE { DWORD ae_cf_compname; DWORD ae_cf_username; DWORD ae_cf_resname; DWORD ae_cf_fileid; DWORD ae_cf_duration; DWORD ae_cf_reason;} AE_CLOSEFILE,*PAE_CLOSEFILE,*LPAE_CLOSEFILE;typedef struct _AE_SERVICESTAT { DWORD ae_ss_compname; DWORD ae_ss_username; DWORD ae_ss_svcname; DWORD ae_ss_status; DWORD ae_ss_code; DWORD ae_ss_text; DWORD ae_ss_returnval;} AE_SERVICESTAT,*PAE_SERVICESTAT,*LPAE_SERVICESTAT;typedef struct _AE_ACLMOD { DWORD ae_am_compname; DWORD ae_am_username; DWORD ae_am_resname; DWORD ae_am_action; DWORD ae_am_datalen;} AE_ACLMOD,*PAE_ACLMOD,*LPAE_ACLMOD;typedef struct _AE_UASMOD { DWORD ae_um_compname; DWORD ae_um_username; DWORD ae_um_resname; DWORD ae_um_rectype; DWORD ae_um_action; DWORD ae_um_datalen;} AE_UASMOD,*PAE_UASMOD,*LPAE_UASMOD;typedef struct _AE_NETLOGON { DWORD ae_no_compname; DWORD ae_no_username; DWORD ae_no_privilege; DWORD ae_no_authflags;} AE_NETLOGON,*PAE_NETLOGON,*LPAE_NETLOGON;typedef struct _AE_NETLOGOFF { DWORD ae_nf_compname; DWORD ae_nf_username; DWORD ae_nf_reserved1; DWORD ae_nf_reserved2;} AE_NETLOGOFF,*PAE_NETLOGOFF,*LPAE_NETLOGOFF;typedef struct _AE_ACCLIM { DWORD ae_al_compname; DWORD ae_al_username; DWORD ae_al_resname; DWORD ae_al_limit;} AE_ACCLIM,*PAE_ACCLIM,*LPAE_ACCLIM;typedef struct _AE_LOCKOUT { DWORD ae_lk_compname; DWORD ae_lk_username; DWORD ae_lk_action; DWORD ae_lk_bad_pw_count;} AE_LOCKOUT,*PAE_LOCKOUT,*LPAE_LOCKOUT;typedef struct _AE_GENERIC { DWORD ae_ge_msgfile; DWORD ae_ge_msgnum; DWORD ae_ge_params; DWORD ae_ge_param1; DWORD ae_ge_param2; DWORD ae_ge_param3; DWORD ae_ge_param4; DWORD ae_ge_param5; DWORD ae_ge_param6; DWORD ae_ge_param7; DWORD ae_ge_param8; DWORD ae_ge_param9;} AE_GENERIC,*PAE_GENERIC,*LPAE_GENERIC;NET_API_STATUS WINAPI NetAuditClear(LPCWSTR,LPCWSTR,LPCWSTR); NET_API_STATUS WINAPI NetAuditRead(LPTSTR,LPTSTR,LPHLOG,DWORD,PDWORD,DWORD,DWORD,PBYTE*,DWORD,PDWORD,PDWORD);NET_API_STATUS WINAPI NetAuditWrite(DWORD,PBYTE,DWORD,LPTSTR,PBYTE);/* These conflict with struct typedefs, why? */#define AE_SRVSTATUS 0#define AE_SESSLOGON 1#define AE_SESSLOGOFF 2#define AE_SESSPWERR 3#define AE_CONNSTART 4#define AE_CONNSTOP 5#define AE_CONNREJ 6#define AE_RESACCESS 7#define AE_RESACCESSREJ 8#define AE_CLOSEFILE 9#define AE_SERVICESTAT 11#define AE_ACLMOD 12#define AE_UASMOD 13#define AE_NETLOGON 14#define AE_NETLOGOFF 15#define AE_NETLOGDENIED 16#define AE_ACCLIMITEXCD 17#define AE_RESACCESS2 18#define AE_ACLMODFAIL 19#define AE_LOCKOUT 20#define AE_GENERIC_TYPE 21#define AE_SRVSTART 0#define AE_SRVPAUSED 1#define AE_SRVCONT 2#define AE_SRVSTOP 3#ifdef __cplusplus}#endif#endif
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -