https://learn.microsoft.com/en-us/windows/win32/api/securitybaseapi/nf-securitybaseapi-addauditaccessaceex
AddAuditAccessAceEx function (securitybaseapi.h) - Win32 apps | Microsoft Learn
Adds a system-audit access control entry (ACE) to the end of a system access control list (SACL). (AddAuditAccessAceEx)
functionhappsmicrosoftlearn