From 0431f53e447d3c8f47dfffc189025ca4ca37da86 Mon Sep 17 00:00:00 2001 From: JanKeller1 Date: Wed, 1 Jun 2016 16:23:08 -0700 Subject: [PATCH] Added hdg above a table, then a bookmark link --- windows/keep-secure/event-5145.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/keep-secure/event-5145.md b/windows/keep-secure/event-5145.md index 610f24dcf5..2eb14cec90 100644 --- a/windows/keep-secure/event-5145.md +++ b/windows/keep-secure/event-5145.md @@ -137,6 +137,8 @@ This event generates every time network share object (file or folder) was access - **Accesses** \[Type = UnicodeString\]: the list of access rights which were requested by **Subject\\Security ID**. These access rights depend on **Object Type**. +## Table of file access codes + | Access | Hexadecimal Value | Description | |-----------------------------------------------------------|-------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | ReadData (or ListDirectory) | 0x1 | **ReadData -** For a file object, the right to read the corresponding file data. For a directory object, the right to read the corresponding directory data.
**ListDirectory -** For a directory, the right to list the contents of the directory. | @@ -161,7 +163,7 @@ This event generates every time network share object (file or folder) was access REQUESTED\_ACCESS: RESULT ACE\_WHICH\_ ALLOWED\_OR\_DENIED\_ACCESS. -- REQUESTED\_ACCESS – the name of requested access (see “Table 13. File access codes.”). +- REQUESTED\_ACCESS – the name of requested access. See [Table of file access codes](#table-of-file-access-codes), earlier in this topic. - RESULT: