Display Filter Reference: Microsoft Local Security Architecture
Protocol field name: lsa
Versions: 1.0.0 to 1.0.16
Back to Display Filter Reference
| Field name | Description | Type | Versions |
|---|---|---|---|
| lsa | Access Mask | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Administer audit log attributes | Boolean | 1.0.0 to 1.0.16 |
| lsa | Create special accounts (for assignment of user rights) | Boolean | 1.0.0 to 1.0.16 |
| lsa | Create a privilege | Boolean | 1.0.0 to 1.0.16 |
| lsa | Create a secret object | Boolean | 1.0.0 to 1.0.16 |
| lsa | Get sensitive policy information | Boolean | 1.0.0 to 1.0.16 |
| lsa | Lookup Names/SIDs | Boolean | 1.0.0 to 1.0.16 |
| lsa | Enable/Disable LSA | Boolean | 1.0.0 to 1.0.16 |
| lsa | Change system audit requirements | Boolean | 1.0.0 to 1.0.16 |
| lsa | Set default quota limits | Boolean | 1.0.0 to 1.0.16 |
| lsa | Modify domain trust relationships | Boolean | 1.0.0 to 1.0.16 |
| lsa | View system audit requirements | Boolean | 1.0.0 to 1.0.16 |
| lsa | View non-sensitive policy information | Boolean | 1.0.0 to 1.0.16 |
| lsa | Account | Character string | 1.0.0 to 1.0.16 |
| lsa | Attr | Unsigned integer (64 bits) | 1.0.0 to 1.0.16 |
| lsa | Auth blob | Byte sequence | 1.0.0 to 1.0.16 |
| lsa | Auth Len | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Auth Type | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Update | Unsigned integer (64 bits) | 1.0.0 to 1.0.16 |
| lsa | Controller | Character string | 1.0.0 to 1.0.16 |
| lsa | Count | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Current MTime | Date and time | 1.0.0 to 1.0.16 |
| lsa | Domain | Character string | 1.0.0 to 1.0.16 |
| lsa | Flat Name | Character string | 1.0.0 to 1.0.16 |
| lsa | Forest | Character string | 1.0.0 to 1.0.16 |
| lsa | FQDN | Character string | 1.0.0 to 1.0.16 |
| lsa | Context Handle | Byte sequence | 1.0.0 to 1.0.16 |
| lsa | Index | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Level | Unsigned integer (16 bits) | 1.0.0 to 1.0.16 |
| lsa | Info Type | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Key | Character string | 1.0.0 to 1.0.16 |
| lsa | Max Count | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | MTime | Date and time | 1.0.0 to 1.0.16 |
| lsa | Seq No | Unsigned integer (64 bits) | 1.0.0 to 1.0.16 |
| lsa | Name | Character string | 1.0.0 to 1.0.16 |
| lsa | New Password | Byte sequence | 1.0.0 to 1.0.16 |
| lsa | Num Mapped | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Attributes | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Length | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Name | Character string | 1.0.0 to 1.0.16 |
| lsa | Old MTime | Date and time | 1.0.0 to 1.0.16 |
| lsa | Old Password | Byte sequence | 1.0.0 to 1.0.16 |
| lsa | Operation | Unsigned integer (16 bits) | 1.0.0 to 1.0.16 |
| lsa | Auditing enabled | Unsigned integer (8 bits) | 1.0.0 to 1.0.16 |
| lsa | Settings | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Log Size | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Next Audit Record | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Percent Full | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Retention Period | Time offset | 1.0.0 to 1.0.16 |
| lsa | Shutdown in progress | Unsigned integer (8 bits) | 1.0.0 to 1.0.16 |
| lsa | Time to shutdown | Time offset | 1.0.0 to 1.0.16 |
| lsa | Info Class | Unsigned integer (16 bits) | 1.0.0 to 1.0.16 |
| lsa | POLICY INFO | Label | 1.0.0 to 1.0.16 |
| lsa | Size Needed | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Display Name | Character string | 1.0.0 to 1.0.16 |
| lsa | Name | Character string | 1.0.0 to 1.0.16 |
| lsa | Effective only | Unsigned integer (8 bits) | 1.0.0 to 1.0.16 |
| lsa | Impersonation level | Unsigned integer (16 bits) | 1.0.0 to 1.0.16 |
| lsa | Length | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Context Tracking | Unsigned integer (8 bits) | 1.0.0 to 1.0.16 |
| lsa | Max WSS | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Min WSS | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Non Paged Pool | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Paged Pool | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Pagefile | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Return code | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Remove All | Unsigned integer (8 bits) | 1.0.0 to 1.0.16 |
| lsa | Resume Handle | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | RID | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | RID Offset | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Rights | Character string | 1.0.0 to 1.0.16 |
| lsa | Size | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | LSA Secret | Byte sequence | 1.0.0 to 1.0.16 |
| lsa | Server | Character string | 1.0.0 to 1.0.16 |
| lsa | Role | Unsigned integer (16 bits) | 1.0.0 to 1.0.16 |
| lsa | SID Type | Unsigned integer (16 bits) | 1.0.0 to 1.0.16 |
| lsa | Size | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Source | Character string | 1.0.0 to 1.0.16 |
| lsa | Trust Attr | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Non Transitive | Boolean | 1.0.0 to 1.0.16 |
| lsa | Tree Parent | Boolean | 1.0.0 to 1.0.16 |
| lsa | Tree Root | Boolean | 1.0.0 to 1.0.16 |
| lsa | Upleve only | Boolean | 1.0.0 to 1.0.16 |
| lsa | Trust Direction | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Trust Type | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Info Level | Unsigned integer (16 bits) | 1.0.0 to 1.0.16 |
| lsa | Unknown char | Unsigned integer (8 bits) | 1.0.0 to 1.0.16 |
| lsa | Unknown hyper | Unsigned integer (64 bits) | 1.0.0 to 1.0.16 |
| lsa | Unknown long | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| lsa | Unknown short | Unsigned integer (16 bits) | 1.0.0 to 1.0.16 |
| lsa | Unknown string | Character string | 1.0.0 to 1.0.16 |
| nt | High | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |
| nt | Low | Unsigned integer (32 bits) | 1.0.0 to 1.0.16 |