AuditObjectAccess type | Wartiva GraphQL API

Object Access audit subcategories for file, registry, and resource access.

Fields

Field Name	Description
`fileSystem` - `AuditPolicySetting!`	Audits access attempts to file system objects.
`registry` - `AuditPolicySetting!`	Audits access attempts to registry keys.
`kernelObject` - `AuditPolicySetting!`	Audits access attempts to kernel objects such as mutexes and semaphores.
`sam` - `AuditPolicySetting!`	Audits access to the Security Accounts Manager (SAM) database.
`certificationServices` - `AuditPolicySetting!`	Audits operations performed by Active Directory Certificate Services.
`applicationGenerated` - `AuditPolicySetting!`	Audits events generated by applications using the Windows Auditing API.
`handleManipulation` - `AuditPolicySetting!`	Audits when a handle to an object is opened or closed.
`fileShare` - `AuditPolicySetting!`	Audits access attempts to shared folders.
`filteringPlatformPacketDrop` - `AuditPolicySetting!`	Audits packets dropped by the Windows Filtering Platform.
`filteringPlatformConnection` - `AuditPolicySetting!`	Audits connections allowed or blocked by the Windows Filtering Platform.
`otherObjectAccessEvents` - `AuditPolicySetting!`	Audits other object access events not covered by specific subcategories.
`detailedFileShare` - `AuditPolicySetting!`	Audits detailed information about file share access, including specific files accessed.
`removableStorage` - `AuditPolicySetting!`	Audits access to removable storage devices.
`centralPolicyStaging` - `AuditPolicySetting!`	Audits central access policy staging operations.

Used by

AuditPolicyWindows type: Windows-specific Advanced Audit Policy Configuration.

Example

{
  "fileSystem": "SUCCESS",
  "registry": "SUCCESS",
  "kernelObject": "SUCCESS",
  "sam": "SUCCESS",
  "certificationServices": "SUCCESS",
  "applicationGenerated": "SUCCESS",
  "handleManipulation": "SUCCESS",
  "fileShare": "SUCCESS",
  "filteringPlatformPacketDrop": "SUCCESS",
  "filteringPlatformConnection": "SUCCESS",
  "otherObjectAccessEvents": "SUCCESS",
  "detailedFileShare": "SUCCESS",
  "removableStorage": "SUCCESS",
  "centralPolicyStaging": "SUCCESS"
}