---
title: AuditObjectAccess type | Wartiva GraphQL API
description: Object Access audit subcategories for file, registry, and resource access. Wartiva GraphQL API reference with arguments, fields, and examples.
url: https://wartiva.com/api-docs/types/audit-object-access.html
updated: 2026-10-07
---

Endpoint configuration · GraphQL type

# `AuditObjectAccess` type

Object Access audit subcategories for file, registry, and resource access.

## Fields

| Field Name | Description |
|---|---|
| `fileSystem` - [`AuditPolicySetting!`](https://wartiva.com/api-docs/types/audit-policy-setting.html) | Audits access attempts to file system objects. |
| `registry` - [`AuditPolicySetting!`](https://wartiva.com/api-docs/types/audit-policy-setting.html) | Audits access attempts to registry keys. |
| `kernelObject` - [`AuditPolicySetting!`](https://wartiva.com/api-docs/types/audit-policy-setting.html) | Audits access attempts to kernel objects such as mutexes and semaphores. |
| `sam` - [`AuditPolicySetting!`](https://wartiva.com/api-docs/types/audit-policy-setting.html) | Audits access to the Security Accounts Manager (SAM) database. |
| `certificationServices` - [`AuditPolicySetting!`](https://wartiva.com/api-docs/types/audit-policy-setting.html) | Audits operations performed by Active Directory Certificate Services. |
| `applicationGenerated` - [`AuditPolicySetting!`](https://wartiva.com/api-docs/types/audit-policy-setting.html) | Audits events generated by applications using the Windows Auditing API. |
| `handleManipulation` - [`AuditPolicySetting!`](https://wartiva.com/api-docs/types/audit-policy-setting.html) | Audits when a handle to an object is opened or closed. |
| `fileShare` - [`AuditPolicySetting!`](https://wartiva.com/api-docs/types/audit-policy-setting.html) | Audits access attempts to shared folders. |
| `filteringPlatformPacketDrop` - [`AuditPolicySetting!`](https://wartiva.com/api-docs/types/audit-policy-setting.html) | Audits packets dropped by the Windows Filtering Platform. |
| `filteringPlatformConnection` - [`AuditPolicySetting!`](https://wartiva.com/api-docs/types/audit-policy-setting.html) | Audits connections allowed or blocked by the Windows Filtering Platform. |
| `otherObjectAccessEvents` - [`AuditPolicySetting!`](https://wartiva.com/api-docs/types/audit-policy-setting.html) | Audits other object access events not covered by specific subcategories. |
| `detailedFileShare` - [`AuditPolicySetting!`](https://wartiva.com/api-docs/types/audit-policy-setting.html) | Audits detailed information about file share access, including specific files accessed. |
| `removableStorage` - [`AuditPolicySetting!`](https://wartiva.com/api-docs/types/audit-policy-setting.html) | Audits access to removable storage devices. |
| `centralPolicyStaging` - [`AuditPolicySetting!`](https://wartiva.com/api-docs/types/audit-policy-setting.html) | Audits central access policy staging operations. |

## Used by

- [`AuditPolicyWindows`](https://wartiva.com/api-docs/types/audit-policy-windows.html) type: Windows-specific Advanced Audit Policy Configuration.

## Example

### Example

```json
{
  "fileSystem": "SUCCESS",
  "registry": "SUCCESS",
  "kernelObject": "SUCCESS",
  "sam": "SUCCESS",
  "certificationServices": "SUCCESS",
  "applicationGenerated": "SUCCESS",
  "handleManipulation": "SUCCESS",
  "fileShare": "SUCCESS",
  "filteringPlatformPacketDrop": "SUCCESS",
  "filteringPlatformConnection": "SUCCESS",
  "otherObjectAccessEvents": "SUCCESS",
  "detailedFileShare": "SUCCESS",
  "removableStorage": "SUCCESS",
  "centralPolicyStaging": "SUCCESS"
}

```

---

Wartiva is in early access. Request access: https://wartiva.com/early-access.html  
All pages: https://wartiva.com/llms.txt