TestimoX

API Reference

Enum

AuditPolicySourceKind

Edit on GitHub
Namespace ADPlayground.DomainControllers.AuditPolicyCollector
Assembly ADPlayground
Source ADPlayground/DirectoryScenarios/DirectoryCatalogScenarioResult.cs:11
Base Enum
Implements
IComparable ISpanFormattable IFormattable IConvertible
Modifiers sealed

Logical sources we can query for audit policy.

Inheritance

  • Enum
  • AuditPolicySourceKind

Values

public const AuditPolicySourceKind Registry #

Read raw policy bytes from HKLM\\SECURITY (registry).

Value: 0
public const AuditPolicySourceKind AuditPol #

Use auditpol.exe text output.

Value: 1
public const AuditPolicySourceKind Native #

Native API locally or through the shared WinRM transport for remote hosts.

Value: 2
public const AuditPolicySourceKind AuditCsv #

SYSVOL\\audit.csv (policy template on disk).

Value: 3