![Vanara](https://raw.githubusercontent.com/dahall/Vanara/master/docs/icons/VanaraHeading.png)
### **Vanara.PInvoke.Security NuGet Package**
[![Version](https://img.shields.io/nuget/v/Vanara.PInvoke.Security?label=NuGet&style=flat-square)](https://github.com/dahall/Vanara/releases)
[![Build status](https://img.shields.io/appveyor/build/dahall/vanara?label=AppVeyor%20build&style=flat-square)](https://ci.appveyor.com/project/dahall/vanara)

PInvoke API (methods, structures and constants) imported from Windows AdvApi32.dll, Authz.dll, sspicli.dll, schannel.dll, tdh.dll and Secur32.dll.

### **What is Vanara?**

[Vanara](https://github.com/dahall/Vanara) is a community project that contains various .NET assemblies which have P/Invoke functions, interfaces, enums and structures from Windows libraries. Each assembly is associated with one or a few tightly related libraries.

### **Issues?**

First check if it's already fixed by trying the [AppVeyor build](https://ci.appveyor.com/nuget/vanara-prerelease).
If you're still running into problems, file an [issue](https://github.com/dahall/Vanara/issues).

### **Included in Vanara.PInvoke.Security**

Functions | Enumerations | Structures
--- | --- | ---
AbortSystemShutdown AcceptSecurityContext AccessCheck AccessCheckAndAuditAlarm AccessCheckByType AccessCheckByTypeAndAuditAlarm AccessCheckByTypeResultList AccessCheckByTypeResultListAndAuditAlarm AccessCheckByTypeResultListAndAuditAlarmByHandle AcquireCredentialsHandle AddAccessAllowedAce AddAccessAllowedAceEx AddAccessAllowedObjectAce AddAccessDeniedAce AddAccessDeniedAceEx AddAccessDeniedObjectAce AddAce AddAuditAccessAce AddAuditAccessAceEx AddAuditAccessObjectAce AddConditionalAce AddMandatoryAce AddResourceAttributeAce AddScopedPolicyIDAce AddSecurityPackage AddUsersToEncryptedFile AdjustTokenGroups AdjustTokenPrivileges AllocateAndInitializeSid AllocateLocallyUniqueId ApplyControlToken AreAllAccessesGranted AreAnyAccessesGranted AuditComputeEffectivePolicyBySid AuditComputeEffectivePolicyByToken AuditEnumerateCategories AuditEnumeratePerUserPolicy AuditEnumerateSubCategories AuditFree AuditLookupCategoryGuidFromCategoryId AuditLookupCategoryIdFromCategoryGuid AuditLookupCategoryName AuditLookupSubCategoryName AuditQueryGlobalSacl AuditQueryPerUserPolicy AuditQuerySecurity AuditQuerySystemPolicy AuditSetGlobalSacl AuditSetPerUserPolicy AuditSetSecurity AuditSetSystemPolicy AuthzAccessCheck AuthzAddSidsToContext AuthzCachedAccessCheck AuthzEnumerateSecurityEventSources AuthzFreeAuditEvent AuthzFreeCentralAccessPolicyCache AuthzFreeContext AuthzFreeHandle AuthzFreeResourceManager AuthzGetInformationFromContext AuthzInitializeCompoundContext AuthzInitializeContextFromAuthzContext AuthzInitializeContextFromSid AuthzInitializeContextFromToken AuthzInitializeObjectAccessAuditEvent AuthzInitializeObjectAccessAuditEvent2 AuthzInitializeRemoteResourceManager AuthzInitializeResourceManager AuthzInitializeResourceManagerEx AuthzInstallSecurityEventSource AuthzModifyClaims AuthzModifySecurityAttributes AuthzModifySids AuthzOpenObjectAudit AuthzRegisterCapChangeNotification AuthzRegisterSecurityEventSource AuthzReportSecurityEvent AuthzReportSecurityEventFromParams AuthzSetAppContainerInformation AuthzUninstallSecurityEventSource AuthzUnregisterCapChangeNotification AuthzUnregisterSecurityEventSource BackupEventLog BuildExplicitAccessWithName BuildSecurityDescriptor BuildTrusteeWithName BuildTrusteeWithObjectsAndName BuildTrusteeWithObjectsAndSid BuildTrusteeWithSid ChangeAccountPassword ChangeServiceConfig ChangeServiceConfig2 CheckTokenCapability CheckTokenMembership CheckTokenMembershipEx ClearEventLog CloseEncryptedFileRaw CloseEventLog CloseServiceHandle CloseThreadWaitChainSession CloseTrace CompleteAuthToken ControlService ControlServiceEx ControlTrace ConvertSecurityDescriptorToStringSecurityDescriptor ConvertSidToStringSid ConvertStringSecurityDescriptorToSecurityDescriptor ConvertStringSidToSid ConvertToAutoInheritPrivateObjectSecurity CopySid CreatePrivateObjectSecurity CreatePrivateObjectSecurityEx CreatePrivateObjectSecurityWithMultipleInheritance CreateProcessAsUser CreateProcessWithLogonW CreateProcessWithTokenW CreateRestrictedToken CreateService CreateTraceInstanceId CreateWellKnownSid CredDelete CredEnumerate CredFindBestCredential CredFree CredGetSessionTypes CredGetTargetInfo CredIsMarshaledCredential CredIsProtected CredMarshalCredentialA CredMarshalCredentialW CredProtect CredRead CredReadDomainCredentials CredRename CredUnmarshalCredentialA CredUnmarshalCredentialW CredUnprotect CredWrite CredWriteDomainCredentials CryptAcquireContext CryptContextAddRef CryptCreateHash CryptDecrypt CryptDeriveKey CryptDestroyHash CryptDestroyKey CryptDuplicateHash CryptDuplicateKey CryptEncrypt CryptEnumProviders CryptEnumProviderTypes CryptExportKey CryptGenKey CryptGenRandom CryptGetDefaultProvider CryptGetHashParam CryptGetKeyParam CryptGetProvParam CryptGetUserKey CryptHashData CryptHashSessionKey CryptImportKey CryptReleaseContext CryptSetHashParam CryptSetKeyParam CryptSetProvider CryptSetProviderEx CryptSetProvParam CryptSignHash CryptVerifySignature CveEventWrite DecryptFile DecryptMessage DeleteAce DeleteSecurityContext DeleteSecurityPackage DeleteService DeregisterEventSource DeriveCapabilitySidsFromName DestroyPrivateObjectSecurity DuplicateEncryptionInfoFile DuplicateToken DuplicateTokenEx EnableTrace EnableTraceEx EnableTraceEx2 EncryptFile EncryptionDisable EncryptMessage EnumDependentServices EnumerateSecurityPackages EnumerateTraceGuids EnumerateTraceGuidsEx EnumServicesStatus EnumServicesStatusEx EqualDomainSid EqualPrefixSid EqualSid EventAccessControl EventAccessQuery EventAccessRemove EventActivityIdControl EventEnabled EventProviderEnabled EventRegister EventSetInformation EventUnregister EventWrite EventWriteEx EventWriteString EventWriteTransfer ExportSecurityContext FileEncryptionStatus FindFirstFreeAce FlushTrace FreeContextBuffer FreeCredentialsHandle FreeEncryptionCertificateHashList FreeInheritedFromArray FreeSid GetAce GetAclInformation GetAuditedPermissionsFromAcl GetComputerObjectName GetCurrentHwProfile GetEffectiveRightsFromAcl GetEventLogInformation GetExplicitEntriesFromAcl GetFileSecurity GetInheritanceSource GetKernelObjectSecurity GetLengthSid GetLocalManagedApplications GetManagedApplicationCategories GetManagedApplications GetNamedSecurityInfo GetNumberOfEventLogRecords GetOldestEventLogRecord GetPrivateObjectSecurity GetSecurityDescriptorControl GetSecurityDescriptorDacl GetSecurityDescriptorGroup GetSecurityDescriptorLength GetSecurityDescriptorOwner GetSecurityDescriptorRMControl GetSecurityDescriptorSacl GetSecurityInfo GetServiceDisplayName GetServiceKeyName GetSidIdentifierAuthority GetSidLengthRequired GetSidSubAuthority GetSidSubAuthorityCount GetThreadWaitChain GetTokenInformation GetTraceEnableFlags GetTraceEnableLevel GetTraceLoggerHandle GetTrusteeForm GetTrusteeNameA GetTrusteeNameW GetTrusteeTypeA GetTrusteeTypeW GetUserName GetUserNameEx GetWindowsAccountDomainSid ImpersonateAnonymousToken ImpersonateLoggedOnUser ImpersonateNamedPipeClient ImpersonateSecurityContext ImpersonateSelf ImportSecurityContext InitializeAcl InitializeSecurityContext InitializeSecurityDescriptor InitializeSid InitiateShutdown InitiateSystemShutdown InitiateSystemShutdownEx InitSecurityInterface InstallApplication IsTextUnicode IsTokenRestricted IsValidAcl IsValidSecurityDescriptor IsValidSid IsWellKnownSid LockServiceDatabase LogonUser LogonUserEx LogonUserExExW LookupAccountName LookupAccountSid LookupPrivilegeDisplayName LookupPrivilegeName LookupPrivilegeValue LookupSecurityDescriptorParts LsaAddAccountRights LsaCallAuthenticationPackage LsaClose LsaConnectUntrusted LsaCreateAccount LsaCreateTrustedDomainEx LsaDeleteTrustedDomain LsaDeregisterLogonProcess LsaEnumerateAccountRights LsaEnumerateAccountsWithUserRight LsaEnumerateLogonSessions LsaEnumerateTrustedDomains LsaEnumerateTrustedDomainsEx LsaFreeMemory LsaFreeReturnBuffer LsaGetAppliedCAPIDs LsaGetLogonSessionData LsaGetSystemAccessAccount LsaLogonUser LsaLookupAuthenticationPackage LsaLookupNames LsaLookupNames2 LsaLookupPrivilegeValue LsaLookupSids LsaLookupSids2 LsaNtStatusToWinError LsaOpenAccount LsaOpenPolicy LsaOpenTrustedDomainByName LsaQueryCAPs LsaQueryDomainInformationPolicy LsaQueryForestTrustInformation LsaQueryInformationPolicy LsaQueryTrustedDomainInfo LsaQueryTrustedDomainInfoByName LsaRegisterLogonProcess LsaRegisterPolicyChangeNotification LsaRemoveAccountRights LsaRetrievePrivateData LsaSetDomainInformationPolicy LsaSetForestTrustInformation LsaSetInformationPolicy LsaSetSystemAccessAccount LsaSetTrustedDomainInfoByName LsaSetTrustedDomainInformation LsaStorePrivateData LsaUnregisterPolicyChangeNotification MakeAbsoluteSD MakeSelfRelativeSD MakeSignature MapGenericMask MSChapSrvChangePassword MSChapSrvChangePassword2 NotifyBootConfigStatus NotifyChangeEventLog NotifyServiceStatusChange ObjectCloseAuditAlarm ObjectOpenAuditAlarm ObjectPrivilegeAuditAlarm OpenBackupEventLog OpenEncryptedFileRaw OpenEventLog OpenProcessToken OpenSCManager OpenService OpenThreadToken OpenThreadWaitChainSession OpenTrace OperationEnd OperationStart PerfAddCounters PerfCloseQueryHandle PerfCreateInstance PerfDecrementULongCounterValue PerfDecrementULongLongCounterValue PerfDeleteCounters PerfDeleteInstance PerfEnumerateCounterSet PerfEnumerateCounterSetInstances PerfIncrementULongCounterValue PerfIncrementULongLongCounterValue PerfOpenQueryHandle PerfQueryCounterData PerfQueryCounterInfo PerfQueryCounterSetRegistrationInfo PerfQueryInstance PerfSetCounterRefValue PerfSetCounterSetInfo PerfSetULongCounterValue PerfSetULongLongCounterValue PerfStartProvider PerfStartProviderEx PerfStopProvider PrivilegeCheck PrivilegedServiceAuditAlarm ProcessTrace QueryAllTraces QueryContextAttributes QueryContextAttributesEx QueryCredentialsAttributes QueryCredentialsAttributesEx QueryRecoveryAgentsOnEncryptedFile QuerySecurityAccessMask QuerySecurityContextToken QuerySecurityPackageInfo QueryServiceConfig QueryServiceConfig2 QueryServiceDynamicInformation QueryServiceLockStatusA QueryServiceLockStatusW QueryServiceObjectSecurity QueryServiceStatus QueryServiceStatusEx QueryTrace QueryTraceProcessingHandle QueryUsersOnEncryptedFile ReadEncryptedFileRaw ReadEventLog RegCloseKey RegConnectRegistry RegCopyTree RegCreateKey RegCreateKeyEx RegCreateKeyTransacted RegDeleteKey RegDeleteKeyEx RegDeleteKeyTransacted RegDeleteKeyValue RegDeleteTree RegDeleteValue RegDisablePredefinedCache RegDisablePredefinedCacheEx RegDisableReflectionKey RegEnableReflectionKey RegEnumKey RegEnumKeyEx RegEnumValue RegFlushKey RegGetKeySecurity RegGetValue RegisterEventSource RegisterServiceCtrlHandler RegisterServiceCtrlHandlerEx RegisterTraceGuids RegisterWaitChainCOMCallback RegLoadAppKey RegLoadKey RegLoadMUIStringW RegNotifyChangeKeyValue RegOpenCurrentUser RegOpenKey RegOpenKeyEx RegOpenKeyTransacted RegOpenUserClassesRoot RegOverridePredefKey RegQueryInfoKey RegQueryMultipleValues RegQueryReflectionKey RegQueryValue RegQueryValueEx RegReplaceKey RegRestoreKey RegSaveKey RegSaveKeyEx RegSetKeySecurity RegSetKeyValue RegSetValue RegSetValueEx RegUnLoadKey RemoveTraceCallback RemoveUsersFromEncryptedFile ReportEvent RevertSecurityContext RevertToSelf SaferCloseLevel SaferComputeTokenFromLevel SaferCreateLevel SaferGetLevelInformation SaferGetPolicyInformation SaferIdentifyLevel SaferiIsExecutableFileType SaferiSearchMatchingHashRules SaferRecordEventLogEntry SaferSetLevelInformation SaferSetPolicyInformation SaslAcceptSecurityContext SaslEnumerateProfiles SaslGetContextOption SaslGetProfilePackageA SaslGetProfilePackageW SaslIdentifyPackage SaslInitializeSecurityContext SaslSetContextOption SetAclInformation SetContextAttributes SetCredentialsAttributes SetEntriesInAcl SetFileSecurity SetKernelObjectSecurity SetNamedSecurityInfo SetPrivateObjectSecurity SetPrivateObjectSecurityEx SetSecurityAccessMask SetSecurityDescriptorControl SetSecurityDescriptorDacl SetSecurityDescriptorGroup SetSecurityDescriptorOwner SetSecurityDescriptorRMControl SetSecurityDescriptorSacl SetSecurityInfo SetServiceBits SetServiceObjectSecurity SetServiceStatus SetThreadToken SetTokenInformation SetTraceCallback SetUserFileEncryptionKey SslCrackCertificate SslEmptyCache SslFreeCertificate SslGetServerIdentity SspiCompareAuthIdentities SspiCopyAuthIdentity SspiDecryptAuthIdentity SspiDecryptAuthIdentityEx SspiEncodeAuthIdentityAsStrings SspiEncodeStringsAsAuthIdentity SspiEncryptAuthIdentity SspiEncryptAuthIdentityEx SspiExcludePackage SspiFreeAuthIdentity SspiGetTargetHostName SspiIsAuthIdentityEncrypted SspiLocalFree SspiMarshalAuthIdentity SspiPrepareForCredRead SspiPrepareForCredWrite SspiSetChannelBindingFlags SspiUnmarshalAuthIdentity SspiValidateAuthIdentity SspiZeroAuthIdentity StartService StartServiceCtrlDispatcher StartTrace StopTrace TdhAggregatePayloadFilters TdhCleanupPayloadEventFilterDescriptor TdhCloseDecodingHandle TdhCreatePayloadFilter TdhDeletePayloadFilter TdhEnumerateManifestProviderEvents TdhEnumerateProviderFieldInformation TdhEnumerateProviderFilters TdhEnumerateProviders TdhEnumerateProvidersForDecodingSource TdhFormatProperty TdhGetDecodingParameter TdhGetEventInformation TdhGetEventMapInformation TdhGetManifestEventInformation TdhGetProperty TdhGetPropertySize TdhGetWppMessage TdhGetWppProperty TdhLoadManifest TdhLoadManifestFromBinary TdhLoadManifestFromMemory TdhOpenDecodingHandle TdhQueryProviderFieldInformation TdhSetDecodingParameter TdhUnloadManifest TdhUnloadManifestFromMemory TraceEvent TraceEventInstance TraceMessage TraceMessageVa TraceQueryInformation TraceSetInformation TranslateName TreeResetNamedSecurityInfo TreeSetNamedSecurityInfo UninstallApplication UnlockServiceDatabase UnregisterTraceGuids UpdateTrace VerifySignature WriteEncryptedFileRaw  | ACCESS_MODE ACTRL_ACCESS_FLAGS ACTRL_PROPERTY_FLAGS INHERIT_FLAGS MULTIPLE_TRUSTEE_OPERATION PROG_INVOKE_SETTING SE_OBJECT_TYPE TRUSTEE_FORM TRUSTEE_TYPE TREE_SEC_INFO INSTALLSPECTYPE MANAGED_APPQUERY MANAGED_APPTYPE ETW_PROVIDER_TRAIT_TYPE EVENT_ENABLE_PROPERTY EVENT_HEADER_EXT_TYPE EVENT_HEADER_FLAG EVENT_HEADER_PROPERTY EVENTSECURITYOPERATION PROCESS_TRACE_MODE TRACELOG_RIGHTS EVENT_ACTIVITY_CTRL EVENT_INFO_CLASS ETW_PROCESS_HANDLE_INFO_TYPE EVENT_CONTROL_CODE EVENT_TRACE_CONTROL EVENT_TRACE_FLAG EVENT_TRACE_TYPE LogFileMode TRACE_LEVEL TRACE_MESSAGE TRACE_PROVIDER_FLAG TRACE_QUERY_INFO_CLASS WMIDPREQUESTCODE WNODE_FLAG LsaAccountAccessMask LsaLookupNamesFlags LsaLookupSidsFlags AuditCondition POLICY_AUDIT_EVENT_TYPE DOMAIN_PASSWORD POLICY_AUDIT_EVENT_OPTIONS POLICY_DOMAIN_INFORMATION_CLASS POLICY_INFORMATION_CLASS POLICY_LSA_SERVER_ROLE POLICY_QOS POLICY_SERVER_ENABLE_STATE TRUST_AUTH_TYPE TrustAttributes TrustDirection TRUSTED_INFORMATION_CLASS TrustType CollisionFlags LSA_FOREST_TRUST_COLLISION_RECORD_TYPE LSA_FOREST_TRUST_RECORD_TYPE LSA_TLN LsaPolicyRights PerfCounterDataType PerfRegInfoType SDDL_REVISION LogonUserProvider LogonUserType WaitChainRetrievalOptions WaitChainSessionType WCT_OBJECT_STATUS WCT_OBJECT_TYPE AccessCheckFlags AUDIT_EVENT_TYPE DOCKINFO EncryptionStatus IS_TEXT_UNICODE OpenRawFlags ProcessLogonFlags EVENTLOG_INFO CRED_ENUM CRED_FLAGS CRED_MARSHAL_TYPE CRED_PERSIST CRED_PROTECTION_TYPE CRED_TI CRED_TYPE CRED_WRITE CRYPT_MODE CryptAcquireContextFlags CryptDecryptFlags CryptEncryptFlags CryptExportKeyFlags CryptGenKeyFlags CryptHashSessionKeyFlags CryptProviderFlags CryptSignFlags HashParam KeyParam KP_PADDING KP_PERMISSIONS ProvParam AceObjectPresence ACL_INFORMATION_CLASS CLAIM_SECURITY_ATTRIBUTE_FLAG CLAIM_SECURITY_ATTRIBUTE_TYPE CTMF ELF_FLAGS EVENTLOG_READ EVENTLOG_TYPE GroupAttributes KnownSIDCapability MANDATORY_LEVEL ObjectAceFlags PrivilegeAttributes PrivilegeSetControl RestrictedPrivilegeOptions SECURITY_DESCRIPTOR_CONTROL SECURITY_IMPERSONATION_LEVEL SEF SID_NAME_USE SYSTEM_MANDATORY_LABEL TOKEN_ELEVATION_TYPE TOKEN_INFORMATION_CLASS TOKEN_TYPE TokenAccess TokenMandatoryPolicy WELL_KNOWN_SID_TYPE REG_DISPOSITION REG_HIVE RegNotifyChangeFilter RegOpenOptions REGSAM RRF ServiceErrorControlType ServiceStartType ServiceTypes REG_APPKEY REG_MUI_STRING REG_SAVE ShutdownFlags SAFER_CRITERIA SAFER_LEVEL_CREATE_FLAGS SAFER_LEVELID SAFER_OBJECT_INFO_CLASS SAFER_POLICY_INFO_CLASS SAFER_SCOPEID SAFER_TOKEN_FLAGS SC_ACTION_TYPE SC_ENUM_TYPE SC_STATUS_TYPE ScManagerAccessTypes SERVICE_NOTIFY_FLAGS SERVICE_STATE SERVICE_STOP_REASON ServiceAcceptedControlCodes ServiceAccessRights ServiceAccessTypes ServiceConfigOption ServiceControl ServiceInfoLevels ServiceStartReason ServiceState ServiceTriggerAction ServiceTriggerDataType ServiceTriggerType AUDIT_PARAM_TYPE APF AUTHZ_CONTEXT_INFORMATION_CLASS AUTHZ_SECURITY_ATTRIBUTE_DATATYPE AUTHZ_SECURITY_ATTRIBUTE_FLAGS AUTHZ_SECURITY_ATTRIBUTE_OPERATION AUTHZ_SID_OPERATION AuthzAccessCheckFlags AuthzAuditEventFlags AuthzContextFlags AuthzResourceManagerFlags SOURCE_SCHEMA_REGISTRATION_FLAGS SP_PROT CREDSSP_SUBMIT_TYPE KERB_ETYPE KERB_LOGON_SUBMIT_TYPE KERB_PROTOCOL_MESSAGE_TYPE KERB_TICKET_FLAGS KRB_NT LogonUserFlags MSV1_0_LOGON_SUBMIT_TYPE POLICY_AUDIT_EVENT_TYPE POLICY_NOTIFICATION_INFORMATION_CLASS SECURITY_LOGON_TYPE EXTENDED_NAME_FORMAT ASC_REQ ASC_RET DREP SASL_OPTION SEC_WINNT_AUTH_IDENTITY_ENCRYPT SEC_WINNT_AUTH_IDENTITY_FLAGS SecBufferType SECPKG_ATTR SECPKG_ATTR_LCT_STATUS SECPKG_CALLFLAGS SECPKG_CONTEXT_EXPORT SECPKG_CRED SECPKG_CRED_ATTR SECPKG_CRED_CLASS SECPKG_FLAG SECPKG_OPTIONS_TYPE SECQOP DECODING_SOURCE EVENT_FIELD_TYPE MAP_FLAGS MAP_VALUETYPE PAYLOAD_OPERATOR PROPERTY_FLAGS TDH_CONTEXT_TYPE TDH_IN_TYPE TDH_OUT_TYPE TEMPLATE_FLAGS                                                                                                                                                                                                                                                                                                                                                                                        | ACTRL_ACCESS_ENTRY ACTRL_ACCESS_ENTRY_LIST ACTRL_ALIST ACTRL_PROPERTY_ENTRY EXPLICIT_ACCESS INHERITED_FROM OBJECTS_AND_NAME OBJECTS_AND_SID TRUSTEE APPCATEGORYINFO APPCATEGORYINFOLIST INSTALLDATA INSTALLSPEC LOCALMANAGEDAPPLICATION MANAGEDAPPLICATION EVENT_EXTENDED_ITEM_EVENT_KEY EVENT_EXTENDED_ITEM_INSTANCE EVENT_EXTENDED_ITEM_PEBS_INDEX EVENT_EXTENDED_ITEM_PMC_COUNTERS EVENT_EXTENDED_ITEM_PROCESS_START_KEY EVENT_EXTENDED_ITEM_RELATED_ACTIVITYID EVENT_EXTENDED_ITEM_STACK_KEY32 EVENT_EXTENDED_ITEM_STACK_KEY64 EVENT_EXTENDED_ITEM_STACK_TRACE32 EVENT_EXTENDED_ITEM_STACK_TRACE64 EVENT_EXTENDED_ITEM_TS_ID EVENT_HEADER EVENT_HEADER_EXTENDED_DATA_ITEM EVENT_RECORD EVENT_TRACE_LOGFILE EVENT_DATA_DESCRIPTOR EVENT_DESCRIPTOR EVENT_FILTER_DESCRIPTOR REGHANDLE CLASSIC_EVENT_ID ENABLE_TRACE_PARAMETERS ENABLE_TRACE_PARAMETERS_V1 ETW_BUFFER_CONTEXT ETW_TRACE_PARTITION_INFORMATION EVENT_FILTER_EVENT_ID EVENT_FILTER_EVENT_NAME EVENT_FILTER_HEADER EVENT_FILTER_LEVEL_KW EVENT_INSTANCE_HEADER EVENT_INSTANCE_INFO EVENT_TRACE EVENT_TRACE_HEADER EVENT_TRACE_PROPERTIES EVENT_TRACE_PROPERTIES_V2 MOF_FIELD PROFILE_SOURCE_INFO TRACE_ENABLE_INFO TRACE_GUID_INFO TRACE_GUID_PROPERTIES TRACE_GUID_REGISTRATION TRACE_LOGFILE_HEADER TRACE_PERIODIC_CAPTURE_STATE_INFO TRACE_PROFILE_INTERVAL TRACE_PROVIDER_INSTANCE_INFO TRACE_VERSION_INFO TRACEHANDLE WNODE_HEADER SafeTRACEHANDLE LSA_OBJECT_ATTRIBUTES LSA_STRING LSA_TRANSLATED_NAME LSA_TRANSLATED_SID2 CYPHER_BLOCK ENCRYPTED_LM_OWF_PASSWORD LM_OWF_PASSWORD SAMPR_ENCRYPTED_USER_PASSWORD CENTRAL_ACCESS_POLICY CENTRAL_ACCESS_POLICY_ENTRY AUDIT_POLICY_INFORMATION POLICY_AUDIT_SID_ARRAY DOMAIN_PASSWORD_INFORMATION LSA_AUTH_INFORMATION POLICY_ACCOUNT_DOMAIN_INFO POLICY_AUDIT_EVENTS_INFO POLICY_DNS_DOMAIN_INFO POLICY_DOMAIN_EFS_INFO POLICY_DOMAIN_KERBEROS_TICKET_INFO POLICY_DOMAIN_QUALITY_OF_SERVICE_INFO POLICY_LSA_SERVER_ROLE_INFO POLICY_MODIFICATION_INFO TRUSTED_DOMAIN_AUTH_INFORMATION TRUSTED_DOMAIN_FULL_INFORMATION TRUSTED_DOMAIN_INFORMATION_EX TRUSTED_DOMAIN_NAME_INFO TRUSTED_PASSWORD_INFO TRUSTED_POSIX_OFFSET_INFO LSA_ENUMERATION_HANDLE LSA_ENUMERATION_INFORMATION LSA_FOREST_TRUST_BINARY_DATA LSA_FOREST_TRUST_COLLISION_INFORMATION LSA_FOREST_TRUST_COLLISION_RECORD LSA_FOREST_TRUST_DOMAIN_INFO LSA_FOREST_TRUST_INFORMATION LSA_FOREST_TRUST_RECORD LSA_HANDLE LSA_REFERENCED_DOMAIN_LIST LSA_TRANSLATED_SID LSA_TRUST_INFORMATION LSA_UNICODE_STRING HPERFPROV HPERFQUERY PERF_COUNTER_DATA PERF_COUNTER_HEADER PERF_COUNTER_IDENTIFIER PERF_COUNTER_IDENTIFIER_WITH_INST_NAME PERF_COUNTER_IDENTITY PERF_COUNTER_INFO PERF_COUNTER_REG_INFO PERF_COUNTERSET_INFO PERF_COUNTERSET_INSTANCE PERF_COUNTERSET_REG_INFO PERF_DATA_HEADER PERF_INSTANCE_HEADER PERF_MULTI_COUNTERS PERF_MULTI_INSTANCES PERF_PROVIDER_CONTEXT PERF_STRING_BUFFER_HEADER PERF_STRING_COUNTER_HEADER HWCT WAITCHAIN_NODE_INFO EncryptedFileContext HW_PROFILE_INFO OPERATION_END_PARAMETERS OPERATION_START_PARAMETERS EVENTLOG_FULL_INFORMATION HEVENTLOG BINARY_BLOB_CREDENTIAL_INFO CERT_CREDENTIAL_INFO CREDENTIAL CREDENTIAL_MGD CREDENTIAL_TARGET_INFORMATION USERNAME_TARGET_CREDENTIAL_INFO CMS_DH_KEY_INFO DSSSEED HMAC_INFO PROV_ENUMALGS PROV_ENUMALGS_EX PUBKEYVER3 EFS_CERTIFICATE_BLOB EFS_HASH_BLOB ENCRYPTION_CERTIFICATE ENCRYPTION_CERTIFICATE_HASH ENCRYPTION_CERTIFICATE_HASH_LIST ENCRYPTION_CERTIFICATE_LIST ACCESS_ALLOWED_ACE ACCESS_ALLOWED_CALLBACK_ACE ACCESS_ALLOWED_CALLBACK_OBJECT_ACE ACCESS_ALLOWED_OBJECT_ACE ACCESS_DENIED_ACE ACCESS_DENIED_CALLBACK_ACE ACCESS_DENIED_CALLBACK_OBJECT_ACE ACCESS_DENIED_OBJECT_ACE ACE_HEADER ACL ACL_REVISION_INFORMATION ACL_SIZE_INFORMATION CLAIM_SECURITY_ATTRIBUTE_FQBN_VALUE CLAIM_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE CLAIM_SECURITY_ATTRIBUTE_V1 CLAIM_SECURITY_ATTRIBUTES_INFORMATION EVENTLOGEOF EVENTLOGHEADER EVENTLOGRECORD GENERIC_MAPPING LUID LUID_AND_ATTRIBUTES QUOTA_LIMITS SECURITY_DESCRIPTOR SID SID_AND_ATTRIBUTES SID_IDENTIFIER_AUTHORITY SYSTEM_ALARM_ACE SYSTEM_ALARM_CALLBACK_ACE SYSTEM_ALARM_CALLBACK_OBJECT_ACE SYSTEM_ALARM_OBJECT_ACE SYSTEM_AUDIT_ACE SYSTEM_AUDIT_CALLBACK_ACE SYSTEM_AUDIT_CALLBACK_OBJECT_ACE SYSTEM_AUDIT_OBJECT_ACE TOKEN_ACCESS_INFORMATION TOKEN_APPCONTAINER_INFORMATION TOKEN_DEFAULT_DACL TOKEN_ELEVATION TOKEN_GROUPS TOKEN_GROUPS_AND_PRIVILEGES TOKEN_LINKED_TOKEN TOKEN_MANDATORY_LABEL TOKEN_MANDATORY_POLICY TOKEN_ORIGIN TOKEN_OWNER TOKEN_PRIMARY_GROUP TOKEN_PRIVILEGES TOKEN_SOURCE TOKEN_STATISTICS TOKEN_USER PRIVILEGE_SET PSID_IDENTIFIER_AUTHORITY VALENT SAFER_CODE_PROPERTIES_V1 SAFER_CODE_PROPERTIES_V2 SAFER_LEVEL_HANDLE ENUM_SERVICE_STATUS ENUM_SERVICE_STATUS_PROCESS QUERY_SERVICE_CONFIG QUERY_SERVICE_LOCK_STATUS SC_ACTION SC_HANDLE SC_LOCK SERVICE_CONTROL_STATUS_REASON_PARAMS SERVICE_DELAYED_AUTO_START_INFO SERVICE_DESCRIPTION SERVICE_FAILURE_ACTIONS SERVICE_FAILURE_ACTIONS_FLAG SERVICE_LAUNCH_PROTECTED_INFO SERVICE_NOTIFY_2 SERVICE_PREFERRED_NODE_INFO SERVICE_PRESHUTDOWN_INFO SERVICE_REQUIRED_PRIVILEGES_INFO SERVICE_SID_INFO SERVICE_START_REASON SERVICE_STATUS SERVICE_STATUS_HANDLE SERVICE_STATUS_PROCESS SERVICE_TABLE_ENTRY SERVICE_TRIGGER SERVICE_TRIGGER_INFO SERVICE_TRIGGER_SPECIFIC_DATA_ITEM AUDIT_IP_ADDRESS AUDIT_OBJECT_TYPE AUDIT_OBJECT_TYPES AUDIT_PARAM AUDIT_PARAMS AUTHZ_ACCESS_CHECK_RESULTS_HANDLE AUTHZ_ACCESS_REQUEST AUTHZ_AUDIT_EVENT_HANDLE AUTHZ_CAP_CHANGE_SUBSCRIPTION_HANDLE AUTHZ_CLIENT_CONTEXT_HANDLE AUTHZ_INIT_INFO AUTHZ_REGISTRATION_OBJECT_TYPE_NAME_OFFSET AUTHZ_RESOURCE_MANAGER_HANDLE AUTHZ_RPC_INIT_INFO_CLIENT AUTHZ_SECURITY_ATTRIBUTE_FQBN_VALUE AUTHZ_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE AUTHZ_SECURITY_ATTRIBUTE_V1 AUTHZ_SECURITY_EVENT_PROVIDER_HANDLE AUTHZ_SOURCE_SCHEMA_REGISTRATION AUTHZ_ACCESS_REPLY SecPkgContext_CipherInfo SecPkgContext_ConnectionInfo SecPkgContext_EapKeyBlock SecPkgContext_EapPrfInfo SecPkgContext_EarlyStart SecPkgContext_IssuerListInfoEx SecPkgContext_KeyingMaterial SecPkgContext_KeyingMaterialInfo SecPkgContext_SessionAppData SecPkgContext_SessionInfo SecPkgContext_SupportedSignatures SecPkgCred_CipherStrengths SecPkgCred_SupportedAlgs SecPkgCred_SupportedProtocols X509Certificate CREDSSP_CRED CREDSSP_CRED_EX SecPkgContext_ClientCreds KERB_CRYPTO_KEY KERB_EXTERNAL_NAME KERB_EXTERNAL_TICKET KERB_INTERACTIVE_LOGON KERB_PURGE_TKT_CACHE_REQUEST KERB_QUERY_TKT_CACHE_REQUEST KERB_QUERY_TKT_CACHE_RESPONSE KERB_RETRIEVE_TKT_REQUEST KERB_RETRIEVE_TKT_RESPONSE KERB_TICKET_CACHE_INFO LSA_LAST_INTER_LOGON_INFO LsaConnectionHandle MSV1_0_INTERACTIVE_LOGON SECURITY_LOGON_SESSION_DATA PSEC_WINNT_AUTH_IDENTITY_OPAQUE SEC_WINNT_AUTH_IDENTITY SEC_WINNT_AUTH_IDENTITY_EX SEC_WINNT_AUTH_IDENTITY_EX2 SecBuffer SecBufferDesc CredHandle CtxtHandle SecPkgContext_AccessToken SecPkgContext_Authority SecPkgContext_Bindings SecPkgContext_ClientSpecifiedTarget SecPkgContext_CredInfo SecPkgContext_DceInfo SecPkgContext_Flags SecPkgContext_KeyInfo SecPkgContext_LastClientTokenStatus SecPkgContext_Lifespan SecPkgContext_Names SecPkgContext_NativeNames SecPkgContext_NegoStatus SecPkgContext_NegotiationInfo SecPkgContext_PackageInfo SecPkgContext_PasswordExpiry SecPkgContext_ProtoInfo SecPkgContext_SessionKey SecPkgContext_Sizes SecPkgContext_StreamSizes SecPkgContext_SubjectAttributes SecPkgContext_TargetInformation SecPkgCredentials_Cert SecPkgCredentials_KdcProxySettingsW SecPkgCredentials_Names SecPkgCredentials_SSIProvider SecPkgInfo SECURITY_PACKAGE_OPTIONS SecurityFunctionTable SafeCredHandle SafeCtxtHandle EVENT_MAP_ENTRY EVENT_MAP_INFO EVENT_PROPERTY_INFO PAYLOAD_FILTER_PREDICATE PROPERTY_DATA_DESCRIPTOR PROVIDER_ENUMERATION_INFO PROVIDER_EVENT_INFO PROVIDER_FIELD_INFO PROVIDER_FIELD_INFOARRAY PROVIDER_FILTER_INFO TDH_CONTEXT TDH_HANDLE TRACE_EVENT_INFO TRACE_PROVIDER_INFO APPNAME COMCLASS DUMMYUNION CALLBACK_UNION CLASS DUMMYUNION CLASS VERSIONDETAIL ForestTrustDataUnion LOCKOBJECT THREADOBJECT VALUESUNION ATTRUNION AUTHZ_SECURITY_ATTRIBUTE_V1_Union NONSTRUCTTYPE STRUCTTYPE CUSTOMSCHEMATYPE                                                                                                                                                                                                                                         
