Constants and catalogs

Numeric constants — right bits, type values, enum members, limits — are catalogued in exactly one place each. This topic is either that place or a pointer to it.

What lives here #

PageHolds
Access mask bitsPer-object-type rights for files, processes, tokens, registry keys and services; the GenericMapping tables; the *_ALL_ACCESS and STANDARD_RIGHTS_* aggregates.
Other constantsImpersonation levels, integrity levels, logon types, elevation types, PIP tiers, audit policy flags, create dispositions, SECURITY_INFORMATION flags, and the kernel's size limits.

What lives elsewhere #

Three catalogues are owned by documents that also define their semantics, and are not duplicated here.

CatalogueCanonical home
ACE types, ACE flags, and their numeric valuesPCDS §5.4 — see ACE types and flags
Well-known SIDsPCDS §4.4 — see Well-known SIDs
Every privilege, with its LUID bitPeios Kernel TRM §3.4.2 — see Privilege catalog

The three pages above are signposts. Following one gets you to the table.

  • Every event type the system emits: the Peios Events Index.
  • Every audit event's payload schema: the same book, chapters 3 to 8.

Edit this page