NtPrivilegeObjectAuditAlarm

function NtPrivilegeObjectAuditAlarm(

  SubsystemName: PUNICODE_STRING;

  HandleId: PVOID;

  TokenHandle: HANDLE;

  DesiredAccess: ACCESS_MASK;

  Privileges: PPRIVILEGE_SET;

  AccessGranted: Boolean

):NTSTATUS;