Searched refs:CapturedSubsystemName (Results 1 – 1 of 1) sorted by relevance
657 CapturedSubsystemName.Buffer = NULL; in SepAccessCheckAndAuditAlarm()811 Status = ProbeAndCaptureUnicodeString(&CapturedSubsystemName, in SepAccessCheckAndAuditAlarm()922 if (CapturedSubsystemName.Buffer != NULL) in SepAccessCheckAndAuditAlarm()1364 UNICODE_STRING CapturedSubsystemName; in NtCloseObjectAuditAlarm() local1425 SepAdtCloseObjectAuditAlarm(&CapturedSubsystemName, in NtCloseObjectAuditAlarm()1654 CapturedSubsystemName.Buffer = NULL; in NtOpenObjectAuditAlarm()1797 &CapturedSubsystemName, in NtOpenObjectAuditAlarm()1832 if (CapturedSubsystemName.Buffer != NULL) in NtOpenObjectAuditAlarm()1893 UNICODE_STRING CapturedSubsystemName; in NtPrivilegedServiceAuditAlarm() local1904 CapturedSubsystemName.Buffer = NULL; in NtPrivilegedServiceAuditAlarm()[all …]