Wireshark
the world's foremost network protocol analyzer
Display Filter Reference: Local Security Authority
Protocol field name: lsarpc
Versions: 1.2.0 to 1.6.5
Back to Display Filter Reference
| Field name | Type | Description | Versions |
|---|---|---|---|
| lsarpc.efs.blob_size | Unsigned integer, 4 bytes | EFS blob size | 1.2.0 to 1.6.5 |
| lsarpc.lookup.names | Label | Names | 1.2.0 to 1.6.5 |
| lsarpc.lsa.string | Character string | String | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AccountAccessMask.LSA_ACCOUNT_ADJUST_PRIVILEGES | Boolean | Lsa Account Adjust Privileges | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AccountAccessMask.LSA_ACCOUNT_ADJUST_QUOTAS | Boolean | Lsa Account Adjust Quotas | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AccountAccessMask.LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS | Boolean | Lsa Account Adjust System Access | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AccountAccessMask.LSA_ACCOUNT_VIEW | Boolean | Lsa Account View | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AddAccountRights.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AddAccountRights.rights | Label | Rights | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AddAccountRights.sid | Label | Sid | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AddPrivilegesToAccount.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AddPrivilegesToAccount.privs | Label | Privs | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AsciiString.length | Unsigned integer, 2 bytes | Length | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AsciiString.size | Unsigned integer, 2 bytes | Size | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AsciiString.string | Unsigned integer, 1 byte | String | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AsciiStringLarge.length | Unsigned integer, 2 bytes | Length | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AsciiStringLarge.size | Unsigned integer, 2 bytes | Size | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AsciiStringLarge.string | Unsigned integer, 1 byte | String | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AuditEventsInfo.auditing_mode | Unsigned integer, 4 bytes | Auditing Mode | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AuditEventsInfo.count | Unsigned integer, 4 bytes | Count | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AuditEventsInfo.settings | Unsigned integer, 4 bytes | Settings | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AuditFullQueryInfo.log_is_full | Unsigned integer, 1 byte | Log Is Full | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AuditFullQueryInfo.shutdown_on_full | Unsigned integer, 1 byte | Shutdown On Full | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AuditFullQueryInfo.unknown | Unsigned integer, 2 bytes | Unknown | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AuditFullSetInfo.shutdown_on_full | Unsigned integer, 1 byte | Shutdown On Full | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AuditLogInfo.log_size | Unsigned integer, 4 bytes | Log Size | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AuditLogInfo.next_audit_record | Unsigned integer, 4 bytes | Next Audit Record | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AuditLogInfo.percent_full | Unsigned integer, 4 bytes | Percent Full | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AuditLogInfo.retention_time | Date and time | Retention Time | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AuditLogInfo.shutdown_in_progress | Unsigned integer, 1 byte | Shutdown In Progress | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AuditLogInfo.time_to_shutdown | Date and time | Time To Shutdown | 1.2.0 to 1.6.5 |
| lsarpc.lsa_AuditLogInfo.unknown | Unsigned integer, 4 bytes | Unknown | 1.2.0 to 1.6.5 |
| lsarpc.lsa_Close.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_CloseTrustedDomainEx.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_CreateAccount.access_mask | Unsigned integer, 4 bytes | Access Mask | 1.2.0 to 1.6.5 |
| lsarpc.lsa_CreateAccount.acct_handle | Sequence of bytes | Acct Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_CreateAccount.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_CreateAccount.sid | Label | Sid | 1.2.0 to 1.6.5 |
| lsarpc.lsa_CreateSecret.access_mask | Unsigned integer, 4 bytes | Access Mask | 1.2.0 to 1.6.5 |
| lsarpc.lsa_CreateSecret.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_CreateSecret.name | Label | Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_CreateSecret.sec_handle | Sequence of bytes | Sec Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_CreateTrustedDomain.access_mask | Unsigned integer, 4 bytes | Access Mask | 1.2.0 to 1.6.5 |
| lsarpc.lsa_CreateTrustedDomain.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_CreateTrustedDomain.info | Label | Info | 1.2.0 to 1.6.5 |
| lsarpc.lsa_CreateTrustedDomain.trustdom_handle | Sequence of bytes | Trustdom Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DATA_BUF.data | Unsigned integer, 1 byte | Data | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DATA_BUF.length | Unsigned integer, 4 bytes | Length | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DATA_BUF.size | Unsigned integer, 4 bytes | Size | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DATA_BUF2.data | Unsigned integer, 1 byte | Data | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DATA_BUF2.size | Unsigned integer, 4 bytes | Size | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DATA_BUF_PTR.buf | Label | Buf | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DefaultQuotaInfo.max_wss | Unsigned integer, 4 bytes | Max Wss | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DefaultQuotaInfo.min_wss | Unsigned integer, 4 bytes | Min Wss | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DefaultQuotaInfo.non_paged_pool | Unsigned integer, 4 bytes | Non Paged Pool | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DefaultQuotaInfo.paged_pool | Unsigned integer, 4 bytes | Paged Pool | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DefaultQuotaInfo.pagefile | Unsigned integer, 4 bytes | Pagefile | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DefaultQuotaInfo.unknown | Unsigned integer, 8 bytes | Unknown | 1.2.0 to 1.6.5 |
| lsarpc.lsa_Delete.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DeleteTrustedDomain.dom_sid | Label | Dom Sid | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DeleteTrustedDomain.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DnsDomainInfo.dns_domain | Label | Dns Domain | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DnsDomainInfo.dns_forest | Label | Dns Forest | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DnsDomainInfo.domain_guid | Globally Unique Identifier | Domain Guid | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DnsDomainInfo.name | Label | Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DnsDomainInfo.sid | Label | Sid | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DomainAccessMask.LSA_DOMAIN_QUERY_AUTH | Boolean | Lsa Domain Query Auth | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DomainAccessMask.LSA_DOMAIN_QUERY_CONTROLLERS | Boolean | Lsa Domain Query Controllers | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DomainAccessMask.LSA_DOMAIN_QUERY_DOMAIN_NAME | Boolean | Lsa Domain Query Domain Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DomainAccessMask.LSA_DOMAIN_QUERY_POSIX | Boolean | Lsa Domain Query Posix | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DomainAccessMask.LSA_DOMAIN_SET_AUTH | Boolean | Lsa Domain Set Auth | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DomainAccessMask.LSA_DOMAIN_SET_CONTROLLERS | Boolean | Lsa Domain Set Controllers | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DomainAccessMask.LSA_DOMAIN_SET_POSIX | Boolean | Lsa Domain Set Posix | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DomainInfo.name | Label | Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DomainInfo.sid | Label | Sid | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DomainInfoEfs.blob_size | Unsigned integer, 4 bytes | Blob Size | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DomainInfoEfs.efs_blob | Unsigned integer, 1 byte | Efs Blob | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DomainInfoKerberos.clock_skew | Unsigned integer, 8 bytes | Clock Skew | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DomainInfoKerberos.enforce_restrictions | Unsigned integer, 4 bytes | Enforce Restrictions | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DomainInfoKerberos.service_tkt_lifetime | Unsigned integer, 8 bytes | Service Tkt Lifetime | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DomainInfoKerberos.unknown6 | Unsigned integer, 8 bytes | Unknown6 | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DomainInfoKerberos.user_tkt_lifetime | Unsigned integer, 8 bytes | User Tkt Lifetime | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DomainInfoKerberos.user_tkt_renewaltime | Unsigned integer, 8 bytes | User Tkt Renewaltime | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DomainInformationPolicy.efs_info | Label | Efs Info | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DomainInformationPolicy.kerberos_info | Label | Kerberos Info | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DomainList.count | Unsigned integer, 4 bytes | Count | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DomainList.domains | Label | Domains | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DomainListEx.count | Unsigned integer, 4 bytes | Count | 1.2.0 to 1.6.5 |
| lsarpc.lsa_DomainListEx.domains | Label | Domains | 1.2.0 to 1.6.5 |
| lsarpc.lsa_EnumAccountRights.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_EnumAccountRights.rights | Label | Rights | 1.2.0 to 1.6.5 |
| lsarpc.lsa_EnumAccountRights.sid | Label | Sid | 1.2.0 to 1.6.5 |
| lsarpc.lsa_EnumAccounts.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_EnumAccounts.num_entries | Unsigned integer, 4 bytes | Num Entries | 1.2.0 to 1.6.5 |
| lsarpc.lsa_EnumAccounts.resume_handle | Unsigned integer, 4 bytes | Resume Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_EnumAccounts.sids | Label | Sids | 1.2.0 to 1.6.5 |
| lsarpc.lsa_EnumAccountsWithUserRight.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_EnumAccountsWithUserRight.name | Label | Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_EnumAccountsWithUserRight.sids | Label | Sids | 1.2.0 to 1.6.5 |
| lsarpc.lsa_EnumPrivs.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_EnumPrivs.max_count | Unsigned integer, 4 bytes | Max Count | 1.2.0 to 1.6.5 |
| lsarpc.lsa_EnumPrivs.privs | Label | Privs | 1.2.0 to 1.6.5 |
| lsarpc.lsa_EnumPrivs.resume_handle | Unsigned integer, 4 bytes | Resume Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_EnumPrivsAccount.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_EnumPrivsAccount.privs | Label | Privs | 1.2.0 to 1.6.5 |
| lsarpc.lsa_EnumTrustDom.domains | Label | Domains | 1.2.0 to 1.6.5 |
| lsarpc.lsa_EnumTrustDom.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_EnumTrustDom.max_size | Unsigned integer, 4 bytes | Max Size | 1.2.0 to 1.6.5 |
| lsarpc.lsa_EnumTrustDom.resume_handle | Unsigned integer, 4 bytes | Resume Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_EnumTrustedDomainsEx.domains | Label | Domains | 1.2.0 to 1.6.5 |
| lsarpc.lsa_EnumTrustedDomainsEx.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_EnumTrustedDomainsEx.max_size | Unsigned integer, 4 bytes | Max Size | 1.2.0 to 1.6.5 |
| lsarpc.lsa_EnumTrustedDomainsEx.resume_handle | Unsigned integer, 4 bytes | Resume Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ForestTrustBinaryData.data | Unsigned integer, 1 byte | Data | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ForestTrustBinaryData.length | Unsigned integer, 4 bytes | Length | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ForestTrustData.data | Label | Data | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ForestTrustData.domain_info | Label | Domain Info | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ForestTrustData.top_level_name | Label | Top Level Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ForestTrustData.top_level_name_ex | Label | Top Level Name Ex | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ForestTrustDomainInfo.dns_domain_name | Label | Dns Domain Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ForestTrustDomainInfo.domain_sid | Label | Domain Sid | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ForestTrustDomainInfo.netbios_domain_name | Label | Netbios Domain Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ForestTrustInformation.count | Unsigned integer, 4 bytes | Count | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ForestTrustInformation.entries | Label | Entries | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ForestTrustRecord.flags | Unsigned integer, 4 bytes | Flags | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ForestTrustRecord.forest_trust_data | Label | Forest Trust Data | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ForestTrustRecord.level | Unsigned integer, 4 bytes | Level | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ForestTrustRecord.unknown | Unsigned integer, 8 bytes | Unknown | 1.2.0 to 1.6.5 |
| lsarpc.lsa_GetUserName.account_name | Label | Account Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_GetUserName.authority_name | Label | Authority Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_GetUserName.system_name | Character string | System Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames.count | Unsigned integer, 4 bytes | Count | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames.domains | Label | Domains | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames.level | Unsigned integer, 4 bytes | Level | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames.names | Label | Names | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames.num_names | Unsigned integer, 4 bytes | Num Names | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames.sids | Label | Sids | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames2.count | Unsigned integer, 4 bytes | Count | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames2.domains | Label | Domains | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames2.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames2.level | Unsigned integer, 4 bytes | Level | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames2.names | Label | Names | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames2.num_names | Unsigned integer, 4 bytes | Num Names | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames2.sids | Label | Sids | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames2.unknown1 | Unsigned integer, 4 bytes | Unknown1 | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames2.unknown2 | Unsigned integer, 4 bytes | Unknown2 | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames3.count | Unsigned integer, 4 bytes | Count | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames3.domains | Label | Domains | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames3.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames3.level | Unsigned integer, 4 bytes | Level | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames3.names | Label | Names | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames3.num_names | Unsigned integer, 4 bytes | Num Names | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames3.sids | Label | Sids | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames3.unknown1 | Unsigned integer, 4 bytes | Unknown1 | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames3.unknown2 | Unsigned integer, 4 bytes | Unknown2 | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames4.count | Unsigned integer, 4 bytes | Count | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames4.domains | Label | Domains | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames4.level | Unsigned integer, 4 bytes | Level | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames4.names | Label | Names | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames4.num_names | Unsigned integer, 4 bytes | Num Names | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames4.sids | Label | Sids | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames4.unknown1 | Unsigned integer, 4 bytes | Unknown1 | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupNames4.unknown2 | Unsigned integer, 4 bytes | Unknown2 | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupPrivDisplayName.disp_name | Label | Disp Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupPrivDisplayName.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupPrivDisplayName.language_id | Unsigned integer, 2 bytes | Language Id | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupPrivDisplayName.name | Label | Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupPrivDisplayName.unknown | Unsigned integer, 2 bytes | Unknown | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupPrivName.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupPrivName.luid | Label | Luid | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupPrivName.name | Label | Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupPrivValue.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupPrivValue.luid | Label | Luid | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupPrivValue.name | Label | Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupSids.count | Unsigned integer, 4 bytes | Count | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupSids.domains | Label | Domains | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupSids.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupSids.level | Unsigned integer, 2 bytes | Level | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupSids.names | Label | Names | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupSids.sids | Label | Sids | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupSids2.count | Unsigned integer, 4 bytes | Count | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupSids2.domains | Label | Domains | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupSids2.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupSids2.level | Unsigned integer, 2 bytes | Level | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupSids2.names | Label | Names | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupSids2.sids | Label | Sids | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupSids2.unknown1 | Unsigned integer, 4 bytes | Unknown1 | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupSids2.unknown2 | Unsigned integer, 4 bytes | Unknown2 | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupSids3.count | Unsigned integer, 4 bytes | Count | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupSids3.domains | Label | Domains | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupSids3.level | Unsigned integer, 2 bytes | Level | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupSids3.names | Label | Names | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupSids3.sids | Label | Sids | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupSids3.unknown1 | Unsigned integer, 4 bytes | Unknown1 | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LookupSids3.unknown2 | Unsigned integer, 4 bytes | Unknown2 | 1.2.0 to 1.6.5 |
| lsarpc.lsa_lsaRQueryForestTrustInformation.forest_trust_info | Label | Forest Trust Info | 1.2.0 to 1.6.5 |
| lsarpc.lsa_lsaRQueryForestTrustInformation.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_lsaRQueryForestTrustInformation.trusted_domain_name | Label | Trusted Domain Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_lsaRQueryForestTrustInformation.unknown | Unsigned integer, 2 bytes | Unknown | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LUID.high | Unsigned integer, 4 bytes | High | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LUID.low | Unsigned integer, 4 bytes | Low | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LUIDAttribute.attribute | Unsigned integer, 4 bytes | Attribute | 1.2.0 to 1.6.5 |
| lsarpc.lsa_LUIDAttribute.luid | Label | Luid | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ModificationInfo.db_create_time | Date and time | Db Create Time | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ModificationInfo.modified_id | Unsigned integer, 8 bytes | Modified Id | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ObjectAttribute.attributes | Unsigned integer, 4 bytes | Attributes | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ObjectAttribute.len | Unsigned integer, 4 bytes | Len | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ObjectAttribute.object_name | Character string | Object Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ObjectAttribute.root_dir | Unsigned integer, 1 byte | Root Dir | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ObjectAttribute.sec_desc | Label | Sec Desc | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ObjectAttribute.sec_qos | Label | Sec Qos | 1.2.0 to 1.6.5 |
| lsarpc.lsa_OpenAccount.access_mask | Unsigned integer, 4 bytes | Access Mask | 1.2.0 to 1.6.5 |
| lsarpc.lsa_OpenAccount.acct_handle | Sequence of bytes | Acct Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_OpenAccount.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_OpenAccount.sid | Label | Sid | 1.2.0 to 1.6.5 |
| lsarpc.lsa_OpenPolicy.access_mask | Unsigned integer, 4 bytes | Access Mask | 1.2.0 to 1.6.5 |
| lsarpc.lsa_OpenPolicy.attr | Label | Attr | 1.2.0 to 1.6.5 |
| lsarpc.lsa_OpenPolicy.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_OpenPolicy.system_name | Unsigned integer, 2 bytes | System Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_OpenPolicy2.access_mask | Unsigned integer, 4 bytes | Access Mask | 1.2.0 to 1.6.5 |
| lsarpc.lsa_OpenPolicy2.attr | Label | Attr | 1.2.0 to 1.6.5 |
| lsarpc.lsa_OpenPolicy2.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_OpenPolicy2.system_name | Character string | System Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_OpenSecret.access_mask | Unsigned integer, 4 bytes | Access Mask | 1.2.0 to 1.6.5 |
| lsarpc.lsa_OpenSecret.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_OpenSecret.name | Label | Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_OpenSecret.sec_handle | Sequence of bytes | Sec Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_OpenTrustedDomain.access_mask | Unsigned integer, 4 bytes | Access Mask | 1.2.0 to 1.6.5 |
| lsarpc.lsa_OpenTrustedDomain.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_OpenTrustedDomain.sid | Label | Sid | 1.2.0 to 1.6.5 |
| lsarpc.lsa_OpenTrustedDomain.trustdom_handle | Sequence of bytes | Trustdom Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_OpenTrustedDomainByName.access_mask | Unsigned integer, 4 bytes | Access Mask | 1.2.0 to 1.6.5 |
| lsarpc.lsa_OpenTrustedDomainByName.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_OpenTrustedDomainByName.name | Label | Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_OpenTrustedDomainByName.trustdom_handle | Sequence of bytes | Trustdom Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PDAccountInfo.name | Label | Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PolicyAccessMask.LSA_POLICY_AUDIT_LOG_ADMIN | Boolean | Lsa Policy Audit Log Admin | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PolicyAccessMask.LSA_POLICY_CREATE_ACCOUNT | Boolean | Lsa Policy Create Account | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PolicyAccessMask.LSA_POLICY_CREATE_PRIVILEGE | Boolean | Lsa Policy Create Privilege | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PolicyAccessMask.LSA_POLICY_CREATE_SECRET | Boolean | Lsa Policy Create Secret | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PolicyAccessMask.LSA_POLICY_GET_PRIVATE_INFORMATION | Boolean | Lsa Policy Get Private Information | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PolicyAccessMask.LSA_POLICY_LOOKUP_NAMES | Boolean | Lsa Policy Lookup Names | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PolicyAccessMask.LSA_POLICY_NOTIFICATION | Boolean | Lsa Policy Notification | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PolicyAccessMask.LSA_POLICY_SERVER_ADMIN | Boolean | Lsa Policy Server Admin | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PolicyAccessMask.LSA_POLICY_SET_AUDIT_REQUIREMENTS | Boolean | Lsa Policy Set Audit Requirements | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PolicyAccessMask.LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS | Boolean | Lsa Policy Set Default Quota Limits | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PolicyAccessMask.LSA_POLICY_TRUST_ADMIN | Boolean | Lsa Policy Trust Admin | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PolicyAccessMask.LSA_POLICY_VIEW_AUDIT_INFORMATION | Boolean | Lsa Policy View Audit Information | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PolicyAccessMask.LSA_POLICY_VIEW_LOCAL_INFORMATION | Boolean | Lsa Policy View Local Information | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PolicyInformation.account_domain | Label | Account Domain | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PolicyInformation.audit_events | Label | Audit Events | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PolicyInformation.audit_log | Label | Audit Log | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PolicyInformation.auditfullquery | Label | Auditfullquery | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PolicyInformation.auditfullset | Label | Auditfullset | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PolicyInformation.db | Label | Db | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PolicyInformation.dns | Label | Dns | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PolicyInformation.domain | Label | Domain | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PolicyInformation.pd | Label | Pd | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PolicyInformation.quota | Label | Quota | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PolicyInformation.replica | Label | Replica | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PolicyInformation.role | Label | Role | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PrivArray.count | Unsigned integer, 4 bytes | Count | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PrivArray.privs | Label | Privs | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PrivEntry.luid | Label | Luid | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PrivEntry.name | Label | Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PrivilegeSet.count | Unsigned integer, 4 bytes | Count | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PrivilegeSet.set | Label | Set | 1.2.0 to 1.6.5 |
| lsarpc.lsa_PrivilegeSet.unknown | Unsigned integer, 4 bytes | Unknown | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QosInfo.context_mode | Unsigned integer, 1 byte | Context Mode | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QosInfo.effective_only | Unsigned integer, 1 byte | Effective Only | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QosInfo.impersonation_level | Unsigned integer, 4 bytes | Impersonation Level | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QosInfo.len | Unsigned integer, 4 bytes | Len | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QueryDomainInformationPolicy.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QueryDomainInformationPolicy.info | Label | Info | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QueryDomainInformationPolicy.level | Unsigned integer, 4 bytes | Level | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QueryInfoPolicy.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QueryInfoPolicy.info | Label | Info | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QueryInfoPolicy.level | Unsigned integer, 4 bytes | Level | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QueryInfoPolicy2.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QueryInfoPolicy2.info | Label | Info | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QueryInfoPolicy2.level | Unsigned integer, 4 bytes | Level | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QuerySecret.new_mtime | Date and time | New Mtime | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QuerySecret.new_val | Label | New Val | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QuerySecret.old_mtime | Date and time | Old Mtime | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QuerySecret.old_val | Label | Old Val | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QuerySecret.sec_handle | Sequence of bytes | Sec Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QuerySecurity.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QuerySecurity.sdbuf | Label | Sdbuf | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QuerySecurity.sec_info | Unsigned integer, 4 bytes | Sec Info | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QueryTrustedDomainInfo.info | Label | Info | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QueryTrustedDomainInfo.level | Unsigned integer, 4 bytes | Level | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QueryTrustedDomainInfo.trustdom_handle | Sequence of bytes | Trustdom Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QueryTrustedDomainInfoByName.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QueryTrustedDomainInfoByName.info | Label | Info | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QueryTrustedDomainInfoByName.level | Unsigned integer, 4 bytes | Level | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QueryTrustedDomainInfoByName.trusted_domain | Label | Trusted Domain | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QueryTrustedDomainInfoBySid.dom_sid | Label | Dom Sid | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QueryTrustedDomainInfoBySid.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QueryTrustedDomainInfoBySid.info | Label | Info | 1.2.0 to 1.6.5 |
| lsarpc.lsa_QueryTrustedDomainInfoBySid.level | Unsigned integer, 4 bytes | Level | 1.2.0 to 1.6.5 |
| lsarpc.lsa_RefDomainList.count | Unsigned integer, 4 bytes | Count | 1.2.0 to 1.6.5 |
| lsarpc.lsa_RefDomainList.domains | Label | Domains | 1.2.0 to 1.6.5 |
| lsarpc.lsa_RefDomainList.max_size | Unsigned integer, 4 bytes | Max Size | 1.2.0 to 1.6.5 |
| lsarpc.lsa_RemoveAccountRights.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_RemoveAccountRights.rights | Label | Rights | 1.2.0 to 1.6.5 |
| lsarpc.lsa_RemoveAccountRights.sid | Label | Sid | 1.2.0 to 1.6.5 |
| lsarpc.lsa_RemoveAccountRights.unknown | Unsigned integer, 4 bytes | Unknown | 1.2.0 to 1.6.5 |
| lsarpc.lsa_RemovePrivilegesFromAccount.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_RemovePrivilegesFromAccount.privs | Label | Privs | 1.2.0 to 1.6.5 |
| lsarpc.lsa_RemovePrivilegesFromAccount.remove_all | Unsigned integer, 1 byte | Remove All | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ReplicaSourceInfo.account | Label | Account | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ReplicaSourceInfo.source | Label | Source | 1.2.0 to 1.6.5 |
| lsarpc.lsa_RightAttribute.name | Character string | Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_RightSet.count | Unsigned integer, 4 bytes | Count | 1.2.0 to 1.6.5 |
| lsarpc.lsa_RightSet.names | Label | Names | 1.2.0 to 1.6.5 |
| lsarpc.lsa_SecretAccessMask.LSA_SECRET_QUERY_VALUE | Boolean | Lsa Secret Query Value | 1.2.0 to 1.6.5 |
| lsarpc.lsa_SecretAccessMask.LSA_SECRET_SET_VALUE | Boolean | Lsa Secret Set Value | 1.2.0 to 1.6.5 |
| lsarpc.lsa_ServerRole.role | Unsigned integer, 4 bytes | Role | 1.2.0 to 1.6.5 |
| lsarpc.lsa_SetDomainInformationPolicy.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_SetDomainInformationPolicy.info | Label | Info | 1.2.0 to 1.6.5 |
| lsarpc.lsa_SetDomainInformationPolicy.level | Unsigned integer, 4 bytes | Level | 1.2.0 to 1.6.5 |
| lsarpc.lsa_SetInfoPolicy.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_SetInfoPolicy.info | Label | Info | 1.2.0 to 1.6.5 |
| lsarpc.lsa_SetInfoPolicy.level | Unsigned integer, 4 bytes | Level | 1.2.0 to 1.6.5 |
| lsarpc.lsa_SetInfoPolicy2.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_SetInfoPolicy2.info | Label | Info | 1.2.0 to 1.6.5 |
| lsarpc.lsa_SetInfoPolicy2.level | Unsigned integer, 4 bytes | Level | 1.2.0 to 1.6.5 |
| lsarpc.lsa_SetSecret.new_val | Label | New Val | 1.2.0 to 1.6.5 |
| lsarpc.lsa_SetSecret.old_val | Label | Old Val | 1.2.0 to 1.6.5 |
| lsarpc.lsa_SetSecret.sec_handle | Sequence of bytes | Sec Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_SetTrustedDomainInfoByName.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| lsarpc.lsa_SetTrustedDomainInfoByName.info | Label | Info | 1.2.0 to 1.6.5 |
| lsarpc.lsa_SetTrustedDomainInfoByName.level | Unsigned integer, 4 bytes | Level | 1.2.0 to 1.6.5 |
| lsarpc.lsa_SetTrustedDomainInfoByName.trusted_domain | Label | Trusted Domain | 1.2.0 to 1.6.5 |
| lsarpc.lsa_SidArray.num_sids | Unsigned integer, 4 bytes | Num Sids | 1.2.0 to 1.6.5 |
| lsarpc.lsa_SidArray.sids | Label | Sids | 1.2.0 to 1.6.5 |
| lsarpc.lsa_SidPtr.sid | Label | Sid | 1.2.0 to 1.6.5 |
| lsarpc.lsa_String.length | Unsigned integer, 2 bytes | Length | 1.2.0 to 1.6.5 |
| lsarpc.lsa_String.size | Unsigned integer, 2 bytes | Size | 1.2.0 to 1.6.5 |
| lsarpc.lsa_String.string | Unsigned integer, 2 bytes | String | 1.2.0 to 1.6.5 |
| lsarpc.lsa_StringLarge.length | Unsigned integer, 2 bytes | Length | 1.2.0 to 1.6.5 |
| lsarpc.lsa_StringLarge.size | Unsigned integer, 2 bytes | Size | 1.2.0 to 1.6.5 |
| lsarpc.lsa_StringLarge.string | Unsigned integer, 2 bytes | String | 1.2.0 to 1.6.5 |
| lsarpc.lsa_StringPointer.string | Label | String | 1.2.0 to 1.6.5 |
| lsarpc.lsa_Strings.count | Unsigned integer, 4 bytes | Count | 1.2.0 to 1.6.5 |
| lsarpc.lsa_Strings.names | Label | Names | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TranslatedName.name | Label | Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TranslatedName.sid_index | Unsigned integer, 4 bytes | Sid Index | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TranslatedName.sid_type | Unsigned integer, 4 bytes | Sid Type | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TranslatedName2.name | Label | Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TranslatedName2.sid_index | Unsigned integer, 4 bytes | Sid Index | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TranslatedName2.sid_type | Unsigned integer, 4 bytes | Sid Type | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TranslatedName2.unknown | Unsigned integer, 4 bytes | Unknown | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TranslatedSid.rid | Unsigned integer, 4 bytes | Rid | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TranslatedSid.sid_index | Unsigned integer, 4 bytes | Sid Index | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TranslatedSid.sid_type | Unsigned integer, 4 bytes | Sid Type | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TranslatedSid2.rid | Unsigned integer, 4 bytes | Rid | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TranslatedSid2.sid_index | Unsigned integer, 4 bytes | Sid Index | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TranslatedSid2.sid_type | Unsigned integer, 4 bytes | Sid Type | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TranslatedSid2.unknown | Unsigned integer, 4 bytes | Unknown | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TranslatedSid3.sid | Label | Sid | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TranslatedSid3.sid_index | Unsigned integer, 4 bytes | Sid Index | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TranslatedSid3.sid_type | Unsigned integer, 4 bytes | Sid Type | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TranslatedSid3.unknown | Unsigned integer, 4 bytes | Unknown | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TransNameArray.count | Unsigned integer, 4 bytes | Count | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TransNameArray.names | Label | Names | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TransNameArray2.count | Unsigned integer, 4 bytes | Count | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TransNameArray2.names | Label | Names | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TransSidArray.count | Unsigned integer, 4 bytes | Count | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TransSidArray.sids | Label | Sids | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TransSidArray2.count | Unsigned integer, 4 bytes | Count | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TransSidArray2.sids | Label | Sids | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TransSidArray3.count | Unsigned integer, 4 bytes | Count | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TransSidArray3.sids | Label | Sids | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfo11.data1 | Label | Data1 | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfo11.info_ex | Label | Info Ex | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoAuthInfo.incoming_count | Unsigned integer, 4 bytes | Incoming Count | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoAuthInfo.incoming_current_auth_info | Label | Incoming Current Auth Info | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoAuthInfo.incoming_previous_auth_info | Label | Incoming Previous Auth Info | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoAuthInfo.outgoing_count | Unsigned integer, 4 bytes | Outgoing Count | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoAuthInfo.outgoing_current_auth_info | Label | Outgoing Current Auth Info | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoAuthInfo.outgoing_previous_auth_info | Label | Outgoing Previous Auth Info | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoBasic.netbios_name | Label | Netbios Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoBasic.sid | Label | Sid | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoBuffer.data | Label | Data | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoBuffer.last_update_time | Date and time | Last Update Time | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoBuffer.secret_type | Unsigned integer, 4 bytes | Secret Type | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoFullInfo.auth_info | Label | Auth Info | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoFullInfo.info_ex | Label | Info Ex | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoFullInfo.posix_offset | Label | Posix Offset | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoInfoAll.auth_info | Label | Auth Info | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoInfoAll.data1 | Label | Data1 | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoInfoAll.info_ex | Label | Info Ex | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoInfoAll.posix_offset | Label | Posix Offset | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoInfoEx.domain_name | Label | Domain Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoInfoEx.netbios_name | Label | Netbios Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoInfoEx.sid | Label | Sid | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoInfoEx.trust_attributes | Unsigned integer, 4 bytes | Trust Attributes | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoInfoEx.trust_direction | Unsigned integer, 4 bytes | Trust Direction | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoInfoEx.trust_type | Unsigned integer, 4 bytes | Trust Type | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoName.netbios_name | Label | Netbios Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoPassword.old_password | Label | Old Password | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoPassword.password | Label | Password | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustDomainInfoPosixOffset.posix_offset | Unsigned integer, 4 bytes | Posix Offset | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustedDomainInfo.auth_info | Label | Auth Info | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustedDomainInfo.full_info | Label | Full Info | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustedDomainInfo.info11 | Label | Info11 | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustedDomainInfo.info_all | Label | Info All | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustedDomainInfo.info_basic | Label | Info Basic | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustedDomainInfo.info_ex | Label | Info Ex | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustedDomainInfo.name | Label | Name | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustedDomainInfo.password | Label | Password | 1.2.0 to 1.6.5 |
| lsarpc.lsa_TrustedDomainInfo.posix_offset | Label | Posix Offset | 1.2.0 to 1.6.5 |
| lsarpc.opnum | Unsigned integer, 2 bytes | Operation | 1.2.0 to 1.6.5 |
| lsarpc.policy.access_mask | Unsigned integer, 4 bytes | Access Mask | 1.2.0 to 1.6.5 |
| lsarpc.sec_desc_buf_len | Unsigned integer, 4 bytes | Sec Desc Buf Len | 1.2.0 to 1.6.5 |
| lsarpc.status | Unsigned integer, 4 bytes | NT Error | 1.2.0 to 1.6.5 |