API Reference
AuditPolicyCollector
Centralized reader for effective Advanced Audit Policy on domain controllers (local or remote).
Inheritance
- Object
- AuditPolicyCollector
Methods
public static IReadOnlyList<AuditSubcategoryLevel> Get(String host, Boolean adjustRegistryAcl = false, Boolean includeNativeLocal = true, AuditPolicySelectionMode mode = PriorityFirst, IReadOnlyList<AuditPolicySourceKind> priorityOrder = null, Boolean includeTransportDiagnostics = false) #IReadOnlyList<AuditSubcategoryLevel>Returns effective audit subcategory levels for the specified host with layered fallbacks and diagnostics.
Parameters
- host System.String
- adjustRegistryAcl System.Boolean = false
- includeNativeLocal System.Boolean = true
- mode ADPlayground.DomainControllers.AuditPolicyCollector.AuditPolicySelectionMode = PriorityFirst
- priorityOrder System.Collections.Generic.IReadOnlyList{ADPlayground.DomainControllers.AuditPolicyCollector.AuditPolicySourceKind} = null
- includeTransportDiagnostics System.Boolean = false
public static List<AuditSubcategorySetting> GetViaAuditPol(String host, out String error) #List<AuditSubcategorySetting>Reads audit policy via auditpol.exe (local only) and parses the output.
Parameters
- host System.String
- error System.String@
public static IReadOnlyList<AuditSubcategoryLevel> GetViaAuditPolLevels(String host) #IReadOnlyList<AuditSubcategoryLevel>auditpol.exe result projected to subcategory/level for convenience.
Parameters
- host System.String
public static List<AuditSubcategorySetting> GetViaAuditPolRemote(String host, out String error) #List<AuditSubcategorySetting>Uses PowerShell remoting to run auditpol on a remote host and parse the output.
Parameters
- host System.String
- error System.String@
public static List<AuditSubcategorySetting> GetViaAuditPolRemote(String host, RemotePowerShellTransportOptions options, out String error) #List<AuditSubcategorySetting>Uses PowerShell remoting to run auditpol on a remote host and parse the output.
Parameters
- host System.String
- options ComputerX.Remote.RemotePowerShellTransportOptions
- error System.String@
public static List<AuditSubcategorySetting> GetViaNativeRemote(String host, out String error) #List<AuditSubcategorySetting>Reads audit policy through the native API on the remote host via the shared WinRM transport.
Parameters
- host System.String
- error System.String@
public static List<AuditSubcategorySetting> GetViaNativeRemote(String host, RemotePowerShellTransportOptions options, out String error) #List<AuditSubcategorySetting>Reads audit policy through the native API on the remote host via the shared WinRM transport.
Parameters
- host System.String
- options ComputerX.Remote.RemotePowerShellTransportOptions
- error System.String@
public static IReadOnlyList<AuditSubcategoryLevel> GetViaSource(String host, AuditPolicySource source) #IReadOnlyList<AuditSubcategoryLevel>Returns audit subcategories for a specific source without fallback.
Parameters
- host System.String
- source ComputerX.Audit.AuditPolicySource
SafeGetRegistry(System.String arg1, System.Collections.Generic.List{ADPlayground.DomainControllers.AuditSubcategoryLevel} arg2, System.Boolean arg3) #Registry read with structured diagnostics.
Parameters
- arg1 System.String
- arg2 System.Collections.Generic.List{ADPlayground.DomainControllers.AuditSubcategoryLevel}
- arg3 System.Boolean