Wireshark · Display Filter Reference: Local Security Authority

Field name	Description	Type	Versions
lsarpc.efs.blob_size	EFS blob size	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lookup.names	Names	Label	1.2.0 to 4.4.2
lsarpc.lsa.string	String	Character string	1.2.0 to 4.4.2
lsarpc.lsa_AccountAccessMask.LSA_ACCOUNT_ADJUST_PRIVILEGES	LSA ACCOUNT ADJUST PRIVILEGES	Boolean	1.2.0 to 4.4.2
lsarpc.lsa_AccountAccessMask.LSA_ACCOUNT_ADJUST_QUOTAS	LSA ACCOUNT ADJUST QUOTAS	Boolean	1.2.0 to 4.4.2
lsarpc.lsa_AccountAccessMask.LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS	LSA ACCOUNT ADJUST SYSTEM ACCESS	Boolean	1.2.0 to 4.4.2
lsarpc.lsa_AccountAccessMask.LSA_ACCOUNT_VIEW	LSA ACCOUNT VIEW	Boolean	1.2.0 to 4.4.2
lsarpc.lsa_AddAccountRights.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_AddAccountRights.rights	Rights	Label	1.2.0 to 4.4.2
lsarpc.lsa_AddAccountRights.sid	Sid	Label	1.2.0 to 4.4.2
lsarpc.lsa_AddPrivilegesToAccount.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_AddPrivilegesToAccount.privs	Privs	Label	1.2.0 to 4.4.2
lsarpc.lsa_AsciiString.length	Length	Unsigned integer (16 bits)	1.2.0 to 4.4.2
lsarpc.lsa_AsciiString.size	Size	Unsigned integer (16 bits)	1.2.0 to 4.4.2
lsarpc.lsa_AsciiString.string	String	Character string	1.2.0 to 4.4.2
lsarpc.lsa_AsciiStringLarge.length	Length	Unsigned integer (16 bits)	1.2.0 to 4.4.2
lsarpc.lsa_AsciiStringLarge.size	Size	Unsigned integer (16 bits)	1.2.0 to 4.4.2
lsarpc.lsa_AsciiStringLarge.string	String	Character string	1.2.0 to 4.4.2
lsarpc.lsa_AuditEventsInfo.auditing_mode	Auditing Mode	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_AuditEventsInfo.count	Count	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_AuditEventsInfo.settings	Settings	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_AuditFullQueryInfo.log_is_full	Log Is Full	Unsigned integer (8 bits)	1.2.0 to 4.4.2
lsarpc.lsa_AuditFullQueryInfo.shutdown_on_full	Shutdown On Full	Unsigned integer (8 bits)	1.2.0 to 4.4.2
lsarpc.lsa_AuditFullQueryInfo.unknown	Unknown	Unsigned integer (16 bits)	1.2.0 to 4.2.9
lsarpc.lsa_AuditFullSetInfo.shutdown_on_full	Shutdown On Full	Unsigned integer (8 bits)	1.2.0 to 4.4.2
lsarpc.lsa_AuditLogInfo.log_size	Log Size	Unsigned integer (32 bits)	1.2.0 to 4.2.9
lsarpc.lsa_AuditLogInfo.maximum_log_size	Maximum Log Size	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_AuditLogInfo.next_audit_record	Next Audit Record	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_AuditLogInfo.percent_full	Percent Full	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_AuditLogInfo.retention_time	Retention Time	Unsigned integer (64 bits)	1.2.0 to 4.4.2
lsarpc.lsa_AuditLogInfo.shutdown_in_progress	Shutdown In Progress	Unsigned integer (8 bits)	1.2.0 to 4.4.2
lsarpc.lsa_AuditLogInfo.time_to_shutdown	Time To Shutdown	Unsigned integer (64 bits)	1.2.0 to 4.4.2
lsarpc.lsa_AuditLogInfo.unknown	Unknown	Unsigned integer (32 bits)	1.2.0 to 4.2.9
lsarpc.lsa_BinaryString.array	Array	Unsigned integer (16 bits)	4.4.0 to 4.4.2
lsarpc.lsa_BinaryString.length	Length	Unsigned integer (16 bits)	4.4.0 to 4.4.2
lsarpc.lsa_BinaryString.size	Size	Unsigned integer (16 bits)	4.4.0 to 4.4.2
lsarpc.lsa_Close.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_CloseTrustedDomainEx.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_CreateAccount.access_mask	Access Mask	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_CreateAccount.acct_handle	Acct Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_CreateAccount.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_CreateAccount.sid	Sid	Label	1.2.0 to 4.4.2
lsarpc.lsa_CreateSecret.access_mask	Access Mask	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_CreateSecret.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_CreateSecret.name	Name	Label	1.2.0 to 4.4.2
lsarpc.lsa_CreateSecret.sec_handle	Sec Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_CreateTrustedDomain.access_mask	Access Mask	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_CreateTrustedDomain.handle	Handle	Byte sequence	1.2.0 to 4.2.9
lsarpc.lsa_CreateTrustedDomain.info	Info	Label	1.2.0 to 4.4.2
lsarpc.lsa_CreateTrustedDomain.policy_handle	Policy Handle	Byte sequence	4.4.0 to 4.4.2
lsarpc.lsa_CreateTrustedDomain.trustdom_handle	Trustdom Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_CreateTrustedDomainEx.access_mask	Access Mask	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_CreateTrustedDomainEx.auth_info	Auth Info	Label	4.4.0 to 4.4.2
lsarpc.lsa_CreateTrustedDomainEx.info	Info	Label	4.4.0 to 4.4.2
lsarpc.lsa_CreateTrustedDomainEx.policy_handle	Policy Handle	Byte sequence	4.4.0 to 4.4.2
lsarpc.lsa_CreateTrustedDomainEx.trustdom_handle	Trustdom Handle	Byte sequence	4.4.0 to 4.4.2
lsarpc.lsa_CreateTrustedDomainEx2.access_mask	Access Mask	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_CreateTrustedDomainEx2.auth_info_internal	Auth Info Internal	Label	4.4.0 to 4.4.2
lsarpc.lsa_CreateTrustedDomainEx2.info	Info	Label	4.4.0 to 4.4.2
lsarpc.lsa_CreateTrustedDomainEx2.policy_handle	Policy Handle	Byte sequence	4.4.0 to 4.4.2
lsarpc.lsa_CreateTrustedDomainEx2.trustdom_handle	Trustdom Handle	Byte sequence	4.4.0 to 4.4.2
lsarpc.lsa_CreateTrustedDomainEx3.access_mask	Access Mask	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_CreateTrustedDomainEx3.auth_info_internal	Auth Info Internal	Label	4.4.0 to 4.4.2
lsarpc.lsa_CreateTrustedDomainEx3.info	Info	Label	4.4.0 to 4.4.2
lsarpc.lsa_CreateTrustedDomainEx3.policy_handle	Policy Handle	Byte sequence	4.4.0 to 4.4.2
lsarpc.lsa_CreateTrustedDomainEx3.trustdom_handle	Trustdom Handle	Byte sequence	4.4.0 to 4.4.2
lsarpc.lsa_DATA_BUF.data	Data	Unsigned integer (8 bits)	1.2.0 to 4.4.2
lsarpc.lsa_DATA_BUF.length	Length	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_DATA_BUF.size	Size	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_DATA_BUF2.data	Data	Unsigned integer (8 bits)	1.2.0 to 4.4.2
lsarpc.lsa_DATA_BUF2.size	Size	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_DATA_BUF_PTR.buf	Buf	Label	1.2.0 to 4.4.2
lsarpc.lsa_DefaultQuotaInfo.max_wss	Max Wss	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_DefaultQuotaInfo.min_wss	Min Wss	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_DefaultQuotaInfo.non_paged_pool	Non Paged Pool	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_DefaultQuotaInfo.paged_pool	Paged Pool	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_DefaultQuotaInfo.pagefile	Pagefile	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_DefaultQuotaInfo.unknown	Unknown	Unsigned integer (64 bits)	1.2.0 to 4.4.2
lsarpc.lsa_Delete.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_DeleteObject.handle	Handle	Byte sequence	4.4.0 to 4.4.2
lsarpc.lsa_DeleteTrustedDomain.dom_sid	Dom Sid	Label	1.2.0 to 4.4.2
lsarpc.lsa_DeleteTrustedDomain.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_DnsDomainInfo.dns_domain	Dns Domain	Label	1.2.0 to 4.4.2
lsarpc.lsa_DnsDomainInfo.dns_forest	Dns Forest	Label	1.2.0 to 4.4.2
lsarpc.lsa_DnsDomainInfo.domain_guid	Domain Guid	Globally Unique Identifier	1.2.0 to 4.4.2
lsarpc.lsa_DnsDomainInfo.name	Name	Label	1.2.0 to 4.4.2
lsarpc.lsa_DnsDomainInfo.sid	Sid	Label	1.2.0 to 4.4.2
lsarpc.lsa_DomainAccessMask.LSA_DOMAIN_QUERY_AUTH	LSA DOMAIN QUERY AUTH	Boolean	1.2.0 to 4.2.9
lsarpc.lsa_DomainAccessMask.LSA_DOMAIN_QUERY_CONTROLLERS	LSA DOMAIN QUERY CONTROLLERS	Boolean	1.2.0 to 4.2.9
lsarpc.lsa_DomainAccessMask.LSA_DOMAIN_QUERY_DOMAIN_NAME	LSA DOMAIN QUERY DOMAIN NAME	Boolean	1.2.0 to 4.2.9
lsarpc.lsa_DomainAccessMask.LSA_DOMAIN_QUERY_POSIX	LSA DOMAIN QUERY POSIX	Boolean	1.2.0 to 4.2.9
lsarpc.lsa_DomainAccessMask.LSA_DOMAIN_SET_AUTH	LSA DOMAIN SET AUTH	Boolean	1.2.0 to 4.2.9
lsarpc.lsa_DomainAccessMask.LSA_DOMAIN_SET_CONTROLLERS	LSA DOMAIN SET CONTROLLERS	Boolean	1.2.0 to 4.2.9
lsarpc.lsa_DomainAccessMask.LSA_DOMAIN_SET_POSIX	LSA DOMAIN SET POSIX	Boolean	1.2.0 to 4.2.9
lsarpc.lsa_DomainInfo.name	Name	Label	1.2.0 to 4.4.2
lsarpc.lsa_DomainInfo.sid	Sid	Label	1.2.0 to 4.4.2
lsarpc.lsa_DomainInfoEfs.blob_size	Blob Size	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_DomainInfoEfs.efs_blob	Efs Blob	Unsigned integer (8 bits)	1.2.0 to 4.4.2
lsarpc.lsa_DomainInfoKerberos.authentication_options	Authentication Options	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_DomainInfoKerberos.clock_skew	Clock Skew	Unsigned integer (64 bits)	1.2.0 to 4.4.2
lsarpc.lsa_DomainInfoKerberos.enforce_restrictions	Enforce Restrictions	Unsigned integer (32 bits)	1.2.0 to 4.2.9
lsarpc.lsa_DomainInfoKerberos.reserved	Reserved	Unsigned integer (64 bits)	4.4.0 to 4.4.2
lsarpc.lsa_DomainInfoKerberos.service_tkt_lifetime	Service Tkt Lifetime	Unsigned integer (64 bits)	1.2.0 to 4.4.2
lsarpc.lsa_DomainInfoKerberos.unknown6	Unknown6	Unsigned integer (64 bits)	1.2.0 to 4.2.9
lsarpc.lsa_DomainInfoKerberos.user_tkt_lifetime	User Tkt Lifetime	Unsigned integer (64 bits)	1.2.0 to 4.4.2
lsarpc.lsa_DomainInfoKerberos.user_tkt_renewaltime	User Tkt Renewaltime	Unsigned integer (64 bits)	1.2.0 to 4.4.2
lsarpc.lsa_DomainInfoQoS.quality_of_service	Quality Of Service	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_DomainInformationPolicy.efs_info	Efs Info	Label	1.2.0 to 4.4.2
lsarpc.lsa_DomainInformationPolicy.kerberos_info	Kerberos Info	Label	1.2.0 to 4.4.2
lsarpc.lsa_DomainInformationPolicy.qos_info	Qos Info	Label	4.4.0 to 4.4.2
lsarpc.lsa_DomainList.count	Count	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_DomainList.domains	Domains	Label	1.2.0 to 4.4.2
lsarpc.lsa_DomainListEx.count	Count	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_DomainListEx.domains	Domains	Label	1.2.0 to 4.4.2
lsarpc.lsa_EnumAccountRights.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_EnumAccountRights.rights	Rights	Label	1.2.0 to 4.4.2
lsarpc.lsa_EnumAccountRights.sid	Sid	Label	1.2.0 to 4.4.2
lsarpc.lsa_EnumAccounts.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_EnumAccounts.num_entries	Num Entries	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_EnumAccounts.resume_handle	Resume Handle	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_EnumAccounts.sids	Sids	Label	1.2.0 to 4.4.2
lsarpc.lsa_EnumAccountsWithUserRight.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_EnumAccountsWithUserRight.name	Name	Label	1.2.0 to 4.4.2
lsarpc.lsa_EnumAccountsWithUserRight.sids	Sids	Label	1.2.0 to 4.4.2
lsarpc.lsa_EnumPrivs.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_EnumPrivs.max_count	Max Count	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_EnumPrivs.privs	Privs	Label	1.2.0 to 4.4.2
lsarpc.lsa_EnumPrivs.resume_handle	Resume Handle	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_EnumPrivsAccount.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_EnumPrivsAccount.privs	Privs	Label	1.2.0 to 4.4.2
lsarpc.lsa_EnumTrustDom.domains	Domains	Label	1.2.0 to 4.4.2
lsarpc.lsa_EnumTrustDom.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_EnumTrustDom.max_size	Max Size	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_EnumTrustDom.resume_handle	Resume Handle	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_EnumTrustedDomainsEx.domains	Domains	Label	1.2.0 to 4.4.2
lsarpc.lsa_EnumTrustedDomainsEx.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_EnumTrustedDomainsEx.max_size	Max Size	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_EnumTrustedDomainsEx.resume_handle	Resume Handle	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_ForestTrustBinaryData.data	Data	Unsigned integer (8 bits)	1.2.0 to 4.4.2
lsarpc.lsa_ForestTrustBinaryData.length	Length	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_ForestTrustCollisionInfo.count	Count	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_ForestTrustCollisionInfo.entries	Entries	Label	4.4.0 to 4.4.2
lsarpc.lsa_ForestTrustCollisionRecord.flags	Flags	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_ForestTrustCollisionRecord.index	Index	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_ForestTrustCollisionRecord.name	Name	Label	4.4.0 to 4.4.2
lsarpc.lsa_ForestTrustCollisionRecord.type	Type	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_ForestTrustData.data	Data	Label	1.2.0 to 4.4.2
lsarpc.lsa_ForestTrustData.domain_info	Domain Info	Label	1.2.0 to 4.4.2
lsarpc.lsa_ForestTrustData.top_level_name	Top Level Name	Label	1.2.0 to 4.4.2
lsarpc.lsa_ForestTrustData.top_level_name_ex	Top Level Name Ex	Label	1.2.0 to 4.4.2
lsarpc.lsa_ForestTrustData2.data	Data	Label	4.4.0 to 4.4.2
lsarpc.lsa_ForestTrustData2.domain_info	Domain Info	Label	4.4.0 to 4.4.2
lsarpc.lsa_ForestTrustData2.scanner_info	Scanner Info	Label	4.4.0 to 4.4.2
lsarpc.lsa_ForestTrustData2.top_level_name	Top Level Name	Label	4.4.0 to 4.4.2
lsarpc.lsa_ForestTrustData2.top_level_name_ex	Top Level Name Ex	Label	4.4.0 to 4.4.2
lsarpc.lsa_ForestTrustDomainInfo.dns_domain_name	Dns Domain Name	Label	1.2.0 to 4.4.2
lsarpc.lsa_ForestTrustDomainInfo.domain_sid	Domain Sid	Label	1.2.0 to 4.4.2
lsarpc.lsa_ForestTrustDomainInfo.netbios_domain_name	Netbios Domain Name	Label	1.2.0 to 4.4.2
lsarpc.lsa_ForestTrustInformation.count	Count	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_ForestTrustInformation.entries	Entries	Label	1.2.0 to 4.4.2
lsarpc.lsa_ForestTrustInformation2.count	Count	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_ForestTrustInformation2.entries	Entries	Label	4.4.0 to 4.4.2
lsarpc.lsa_ForestTrustRecord.flags	Flags	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_ForestTrustRecord.forest_trust_data	Forest Trust Data	Label	1.2.0 to 4.4.2
lsarpc.lsa_ForestTrustRecord.level	Level	Unsigned integer (32 bits)	1.2.0 to 4.2.9
lsarpc.lsa_ForestTrustRecord.time	Time	Date and time	4.4.0 to 4.4.2
lsarpc.lsa_ForestTrustRecord.type	Type	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_ForestTrustRecord.unknown	Unknown	Unsigned integer (64 bits)	1.2.0 to 4.2.9
lsarpc.lsa_ForestTrustRecord2.flags	Flags	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_ForestTrustRecord2.forest_trust_data	Forest Trust Data	Label	4.4.0 to 4.4.2
lsarpc.lsa_ForestTrustRecord2.time	Time	Date and time	4.4.0 to 4.4.2
lsarpc.lsa_ForestTrustRecord2.type	Type	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_ForestTrustRecordFlags.LSA_NB_DISABLED_ADMIN	LSA NB DISABLED ADMIN	Boolean	4.4.0 to 4.4.2
lsarpc.lsa_ForestTrustRecordFlags.LSA_NB_DISABLED_CONFLICT	LSA NB DISABLED CONFLICT	Boolean	4.4.0 to 4.4.2
lsarpc.lsa_ForestTrustRecordFlags.LSA_SID_DISABLED_ADMIN	LSA SID DISABLED ADMIN	Boolean	4.4.0 to 4.4.2
lsarpc.lsa_ForestTrustRecordFlags.LSA_SID_DISABLED_CONFLICT	LSA SID DISABLED CONFLICT	Boolean	4.4.0 to 4.4.2
lsarpc.lsa_ForestTrustRecordFlags.LSA_TLN_DISABLED_ADMIN	LSA TLN DISABLED ADMIN	Boolean	4.4.0 to 4.4.2
lsarpc.lsa_ForestTrustRecordFlags.LSA_TLN_DISABLED_CONFLICT	LSA TLN DISABLED CONFLICT	Boolean	4.4.0 to 4.4.2
lsarpc.lsa_ForestTrustRecordFlags.LSA_TLN_DISABLED_NEW	LSA TLN DISABLED NEW	Boolean	4.4.0 to 4.4.2
lsarpc.lsa_GetSystemAccessAccount.access_mask	Access Mask	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_GetSystemAccessAccount.handle	Handle	Byte sequence	4.4.0 to 4.4.2
lsarpc.lsa_GetUserName.account_name	Account Name	Label	1.2.0 to 4.4.2
lsarpc.lsa_GetUserName.authority_name	Authority Name	Label	1.2.0 to 4.4.2
lsarpc.lsa_GetUserName.system_name	System Name	Character string	1.2.0 to 4.4.2
lsarpc.lsa_krbAuthenticationOptions.LSA_POLICY_KERBEROS_VALIDATE_CLIENT	LSA POLICY KERBEROS VALIDATE CLIENT	Boolean	4.4.0 to 4.4.2
lsarpc.lsa_LookupNames.count	Count	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames.domains	Domains	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames.level	Level	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames.names	Names	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames.num_names	Num Names	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames.sids	Sids	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames2.client_revision	Client Revision	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_LookupNames2.count	Count	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames2.domains	Domains	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames2.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames2.level	Level	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames2.lookup_options	Lookup Options	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_LookupNames2.names	Names	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames2.num_names	Num Names	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames2.sids	Sids	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames2.unknown1	Unknown1	Unsigned integer (32 bits)	1.2.0 to 4.2.9
lsarpc.lsa_LookupNames2.unknown2	Unknown2	Unsigned integer (32 bits)	1.2.0 to 4.2.9
lsarpc.lsa_LookupNames3.client_revision	Client Revision	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_LookupNames3.count	Count	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames3.domains	Domains	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames3.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames3.level	Level	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames3.lookup_options	Lookup Options	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_LookupNames3.names	Names	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames3.num_names	Num Names	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames3.sids	Sids	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames3.unknown1	Unknown1	Unsigned integer (32 bits)	1.2.0 to 4.2.9
lsarpc.lsa_LookupNames3.unknown2	Unknown2	Unsigned integer (32 bits)	1.2.0 to 4.2.9
lsarpc.lsa_LookupNames4.client_revision	Client Revision	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_LookupNames4.count	Count	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames4.domains	Domains	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames4.level	Level	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames4.lookup_options	Lookup Options	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_LookupNames4.names	Names	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames4.num_names	Num Names	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames4.sids	Sids	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupNames4.unknown1	Unknown1	Unsigned integer (32 bits)	1.2.0 to 4.2.9
lsarpc.lsa_LookupNames4.unknown2	Unknown2	Unsigned integer (32 bits)	1.2.0 to 4.2.9
lsarpc.lsa_LookupPrivDisplayName.disp_name	Disp Name	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupPrivDisplayName.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_LookupPrivDisplayName.language_id	Language Id	Unsigned integer (16 bits)	1.2.0 to 4.4.2
lsarpc.lsa_LookupPrivDisplayName.language_id_sys	Language Id Sys	Unsigned integer (16 bits)	4.4.0 to 4.4.2
lsarpc.lsa_LookupPrivDisplayName.name	Name	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupPrivDisplayName.returned_language_id	Returned Language Id	Unsigned integer (16 bits)	4.4.0 to 4.4.2
lsarpc.lsa_LookupPrivDisplayName.unknown	Unknown	Unsigned integer (16 bits)	1.2.0 to 4.2.9
lsarpc.lsa_LookupPrivName.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_LookupPrivName.luid	Luid	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupPrivName.name	Name	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupPrivValue.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_LookupPrivValue.luid	Luid	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupPrivValue.name	Name	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupSids.count	Count	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_LookupSids.domains	Domains	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupSids.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_LookupSids.level	Level	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_LookupSids.names	Names	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupSids.sids	Sids	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupSids2.client_revision	Client Revision	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_LookupSids2.count	Count	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_LookupSids2.domains	Domains	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupSids2.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_LookupSids2.level	Level	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_LookupSids2.lookup_options	Lookup Options	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_LookupSids2.names	Names	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupSids2.sids	Sids	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupSids2.unknown1	Unknown1	Unsigned integer (32 bits)	1.2.0 to 4.2.9
lsarpc.lsa_LookupSids2.unknown2	Unknown2	Unsigned integer (32 bits)	1.2.0 to 4.2.9
lsarpc.lsa_LookupSids3.client_revision	Client Revision	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_LookupSids3.count	Count	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_LookupSids3.domains	Domains	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupSids3.level	Level	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_LookupSids3.lookup_options	Lookup Options	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_LookupSids3.names	Names	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupSids3.sids	Sids	Label	1.2.0 to 4.4.2
lsarpc.lsa_LookupSids3.unknown1	Unknown1	Unsigned integer (32 bits)	1.2.0 to 4.2.9
lsarpc.lsa_LookupSids3.unknown2	Unknown2	Unsigned integer (32 bits)	1.2.0 to 4.2.9
lsarpc.lsa_LsarOpenPolicy3.DesiredAccess	DesiredAccess	Unsigned integer (32 bits)	4.2.0 to 4.2.9
lsarpc.lsa_LsarOpenPolicy3.handle	Handle	Byte sequence	4.2.0 to 4.2.9
lsarpc.lsa_LsarOpenPolicy3.InRevisionInfo	InRevisionInfo	Label	4.2.0 to 4.2.9
lsarpc.lsa_LsarOpenPolicy3.InVersion	InVersion	Unsigned integer (32 bits)	4.2.0 to 4.2.9
lsarpc.lsa_LsarOpenPolicy3.ObjectAttributes	ObjectAttributes	Label	4.2.0 to 4.2.9
lsarpc.lsa_LsarOpenPolicy3.OutRevisionInfo	OutRevisionInfo	Label	4.2.0 to 4.2.9
lsarpc.lsa_LsarOpenPolicy3.OutVersion	OutVersion	Unsigned integer (32 bits)	4.2.0 to 4.2.9
lsarpc.lsa_LsarOpenPolicy3.system_name	System Name	Character string	4.2.0 to 4.2.9
lsarpc.lsa_lsaRQueryForestTrustInformation.forest_trust_info	Forest Trust Info	Label	1.2.0 to 4.4.2
lsarpc.lsa_lsaRQueryForestTrustInformation.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_lsaRQueryForestTrustInformation.highest_record_type	Highest Record Type	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_lsaRQueryForestTrustInformation.trusted_domain_name	Trusted Domain Name	Label	1.2.0 to 4.4.2
lsarpc.lsa_lsaRQueryForestTrustInformation.unknown	Unknown	Unsigned integer (16 bits)	1.2.0 to 4.2.9
lsarpc.lsa_lsaRQueryForestTrustInformation2.forest_trust_info	Forest Trust Info	Label	4.4.0 to 4.4.2
lsarpc.lsa_lsaRQueryForestTrustInformation2.handle	Handle	Byte sequence	4.4.0 to 4.4.2
lsarpc.lsa_lsaRQueryForestTrustInformation2.highest_record_type	Highest Record Type	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_lsaRQueryForestTrustInformation2.trusted_domain_name	Trusted Domain Name	Label	4.4.0 to 4.4.2
lsarpc.lsa_lsaRSetForestTrustInformation.check_only	Check Only	Unsigned integer (8 bits)	4.4.0 to 4.4.2
lsarpc.lsa_lsaRSetForestTrustInformation.collision_info	Collision Info	Label	4.4.0 to 4.4.2
lsarpc.lsa_lsaRSetForestTrustInformation.forest_trust_info	Forest Trust Info	Label	4.4.0 to 4.4.2
lsarpc.lsa_lsaRSetForestTrustInformation.handle	Handle	Byte sequence	4.4.0 to 4.4.2
lsarpc.lsa_lsaRSetForestTrustInformation.highest_record_type	Highest Record Type	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_lsaRSetForestTrustInformation.trusted_domain_name	Trusted Domain Name	Label	4.4.0 to 4.4.2
lsarpc.lsa_lsaRSetForestTrustInformation2.check_only	Check Only	Unsigned integer (8 bits)	4.4.0 to 4.4.2
lsarpc.lsa_lsaRSetForestTrustInformation2.collision_info	Collision Info	Label	4.4.0 to 4.4.2
lsarpc.lsa_lsaRSetForestTrustInformation2.forest_trust_info	Forest Trust Info	Label	4.4.0 to 4.4.2
lsarpc.lsa_lsaRSetForestTrustInformation2.handle	Handle	Byte sequence	4.4.0 to 4.4.2
lsarpc.lsa_lsaRSetForestTrustInformation2.highest_record_type	Highest Record Type	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_lsaRSetForestTrustInformation2.trusted_domain_name	Trusted Domain Name	Label	4.4.0 to 4.4.2
lsarpc.lsa_LUID.high	High	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_LUID.low	Low	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_LUIDAttribute.attribute	Attribute	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_LUIDAttribute.luid	Luid	Label	1.2.0 to 4.4.2
lsarpc.lsa_ModificationInfo.db_create_time	Db Create Time	Date and time	1.2.0 to 4.4.2
lsarpc.lsa_ModificationInfo.modified_id	Modified Id	Unsigned integer (64 bits)	1.2.0 to 4.4.2
lsarpc.lsa_ObjectAttribute.attributes	Attributes	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_ObjectAttribute.len	Len	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_ObjectAttribute.object_name	Object Name	Character string	1.2.0 to 4.4.2
lsarpc.lsa_ObjectAttribute.root_dir	Root Dir	Unsigned integer (8 bits)	1.2.0 to 4.4.2
lsarpc.lsa_ObjectAttribute.sec_desc	Sec Desc	Label	1.2.0 to 4.4.2
lsarpc.lsa_ObjectAttribute.sec_qos	Sec Qos	Label	1.2.0 to 4.4.2
lsarpc.lsa_OpenAccount.access_mask	Access Mask	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_OpenAccount.acct_handle	Acct Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_OpenAccount.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_OpenAccount.sid	Sid	Label	1.2.0 to 4.4.2
lsarpc.lsa_OpenPolicy.access_mask	Access Mask	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_OpenPolicy.attr	Attr	Label	1.2.0 to 4.4.2
lsarpc.lsa_OpenPolicy.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_OpenPolicy.system_name	System Name	Unsigned integer (16 bits)	1.2.0 to 4.4.2
lsarpc.lsa_OpenPolicy2.access_mask	Access Mask	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_OpenPolicy2.attr	Attr	Label	1.2.0 to 4.4.2
lsarpc.lsa_OpenPolicy2.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_OpenPolicy2.system_name	System Name	Character string	1.2.0 to 4.4.2
lsarpc.lsa_OpenPolicy3.access_mask	Access Mask	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_OpenPolicy3.attr	Attr	Label	4.4.0 to 4.4.2
lsarpc.lsa_OpenPolicy3.handle	Handle	Byte sequence	4.4.0 to 4.4.2
lsarpc.lsa_OpenPolicy3.in_revision_info	In Revision Info	Label	4.4.0 to 4.4.2
lsarpc.lsa_OpenPolicy3.in_version	In Version	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_OpenPolicy3.out_revision_info	Out Revision Info	Label	4.4.0 to 4.4.2
lsarpc.lsa_OpenPolicy3.out_version	Out Version	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_OpenPolicy3.system_name	System Name	Character string	4.4.0 to 4.4.2
lsarpc.lsa_OpenSecret.access_mask	Access Mask	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_OpenSecret.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_OpenSecret.name	Name	Label	1.2.0 to 4.4.2
lsarpc.lsa_OpenSecret.sec_handle	Sec Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_OpenTrustedDomain.access_mask	Access Mask	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_OpenTrustedDomain.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_OpenTrustedDomain.sid	Sid	Label	1.2.0 to 4.4.2
lsarpc.lsa_OpenTrustedDomain.trustdom_handle	Trustdom Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_OpenTrustedDomainByName.access_mask	Access Mask	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_OpenTrustedDomainByName.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_OpenTrustedDomainByName.name	Name	Label	1.2.0 to 4.4.2
lsarpc.lsa_OpenTrustedDomainByName.trustdom_handle	Trustdom Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_PDAccountInfo.name	Name	Label	1.2.0 to 4.4.2
lsarpc.lsa_PolicyAccessMask.LSA_POLICY_AUDIT_LOG_ADMIN	LSA POLICY AUDIT LOG ADMIN	Boolean	1.2.0 to 4.4.2
lsarpc.lsa_PolicyAccessMask.LSA_POLICY_CREATE_ACCOUNT	LSA POLICY CREATE ACCOUNT	Boolean	1.2.0 to 4.4.2
lsarpc.lsa_PolicyAccessMask.LSA_POLICY_CREATE_PRIVILEGE	LSA POLICY CREATE PRIVILEGE	Boolean	1.2.0 to 4.4.2
lsarpc.lsa_PolicyAccessMask.LSA_POLICY_CREATE_SECRET	LSA POLICY CREATE SECRET	Boolean	1.2.0 to 4.4.2
lsarpc.lsa_PolicyAccessMask.LSA_POLICY_GET_PRIVATE_INFORMATION	LSA POLICY GET PRIVATE INFORMATION	Boolean	1.2.0 to 4.4.2
lsarpc.lsa_PolicyAccessMask.LSA_POLICY_LOOKUP_NAMES	LSA POLICY LOOKUP NAMES	Boolean	1.2.0 to 4.4.2
lsarpc.lsa_PolicyAccessMask.LSA_POLICY_NOTIFICATION	LSA POLICY NOTIFICATION	Boolean	1.2.0 to 4.4.2
lsarpc.lsa_PolicyAccessMask.LSA_POLICY_SERVER_ADMIN	LSA POLICY SERVER ADMIN	Boolean	1.2.0 to 4.4.2
lsarpc.lsa_PolicyAccessMask.LSA_POLICY_SET_AUDIT_REQUIREMENTS	LSA POLICY SET AUDIT REQUIREMENTS	Boolean	1.2.0 to 4.4.2
lsarpc.lsa_PolicyAccessMask.LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS	LSA POLICY SET DEFAULT QUOTA LIMITS	Boolean	1.2.0 to 4.4.2
lsarpc.lsa_PolicyAccessMask.LSA_POLICY_TRUST_ADMIN	LSA POLICY TRUST ADMIN	Boolean	1.2.0 to 4.4.2
lsarpc.lsa_PolicyAccessMask.LSA_POLICY_VIEW_AUDIT_INFORMATION	LSA POLICY VIEW AUDIT INFORMATION	Boolean	1.2.0 to 4.4.2
lsarpc.lsa_PolicyAccessMask.LSA_POLICY_VIEW_LOCAL_INFORMATION	LSA POLICY VIEW LOCAL INFORMATION	Boolean	1.2.0 to 4.4.2
lsarpc.lsa_PolicyInformation.account_domain	Account Domain	Label	1.2.0 to 4.4.2
lsarpc.lsa_PolicyInformation.audit_events	Audit Events	Label	1.2.0 to 4.4.2
lsarpc.lsa_PolicyInformation.audit_log	Audit Log	Label	1.2.0 to 4.4.2
lsarpc.lsa_PolicyInformation.auditfullquery	Auditfullquery	Label	1.2.0 to 4.4.2
lsarpc.lsa_PolicyInformation.auditfullset	Auditfullset	Label	1.2.0 to 4.4.2
lsarpc.lsa_PolicyInformation.db	Db	Label	1.2.0 to 4.2.9
lsarpc.lsa_PolicyInformation.dns	Dns	Label	1.2.0 to 4.4.2
lsarpc.lsa_PolicyInformation.dns_int	Dns Int	Label	4.4.0 to 4.4.2
lsarpc.lsa_PolicyInformation.domain	Domain	Label	1.2.0 to 4.4.2
lsarpc.lsa_PolicyInformation.l_account_domain	L Account Domain	Label	4.4.0 to 4.4.2
lsarpc.lsa_PolicyInformation.mod	Mod	Label	4.4.0 to 4.4.2
lsarpc.lsa_PolicyInformation.pd	Pd	Label	1.2.0 to 4.4.2
lsarpc.lsa_PolicyInformation.quota	Quota	Label	1.2.0 to 4.4.2
lsarpc.lsa_PolicyInformation.replica	Replica	Label	1.2.0 to 4.4.2
lsarpc.lsa_PolicyInformation.role	Role	Label	1.2.0 to 4.4.2
lsarpc.lsa_PrivArray.count	Count	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_PrivArray.privs	Privs	Label	1.2.0 to 4.4.2
lsarpc.lsa_PrivEntry.luid	Luid	Label	1.2.0 to 4.4.2
lsarpc.lsa_PrivEntry.name	Name	Label	1.2.0 to 4.4.2
lsarpc.lsa_PrivilegeSet.count	Count	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_PrivilegeSet.set	Set	Label	1.2.0 to 4.4.2
lsarpc.lsa_PrivilegeSet.unknown	Unknown	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_QosInfo.context_mode	Context Mode	Unsigned integer (8 bits)	1.2.0 to 4.4.2
lsarpc.lsa_QosInfo.effective_only	Effective Only	Unsigned integer (8 bits)	1.2.0 to 4.4.2
lsarpc.lsa_QosInfo.impersonation_level	Impersonation Level	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_QosInfo.len	Len	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_QueryDomainInformationPolicy.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_QueryDomainInformationPolicy.info	Info	Label	1.2.0 to 4.4.2
lsarpc.lsa_QueryDomainInformationPolicy.level	Level	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_QueryInfoPolicy.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_QueryInfoPolicy.info	Info	Label	1.2.0 to 4.4.2
lsarpc.lsa_QueryInfoPolicy.level	Level	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_QueryInfoPolicy2.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_QueryInfoPolicy2.info	Info	Label	1.2.0 to 4.4.2
lsarpc.lsa_QueryInfoPolicy2.level	Level	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_QuerySecret.new_mtime	New Mtime	Date and time	1.2.0 to 4.4.2
lsarpc.lsa_QuerySecret.new_val	New Val	Label	1.2.0 to 4.4.2
lsarpc.lsa_QuerySecret.old_mtime	Old Mtime	Date and time	1.2.0 to 4.4.2
lsarpc.lsa_QuerySecret.old_val	Old Val	Label	1.2.0 to 4.4.2
lsarpc.lsa_QuerySecret.sec_handle	Sec Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_QuerySecurity.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_QuerySecurity.sdbuf	Sdbuf	Label	1.2.0 to 4.4.2
lsarpc.lsa_QuerySecurity.sec_info	Sec Info	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_QueryTrustedDomainInfo.info	Info	Label	1.2.0 to 4.4.2
lsarpc.lsa_QueryTrustedDomainInfo.level	Level	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_QueryTrustedDomainInfo.trustdom_handle	Trustdom Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_QueryTrustedDomainInfoByName.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_QueryTrustedDomainInfoByName.info	Info	Label	1.2.0 to 4.4.2
lsarpc.lsa_QueryTrustedDomainInfoByName.level	Level	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_QueryTrustedDomainInfoByName.trusted_domain	Trusted Domain	Label	1.2.0 to 4.4.2
lsarpc.lsa_QueryTrustedDomainInfoBySid.dom_sid	Dom Sid	Label	1.2.0 to 4.4.2
lsarpc.lsa_QueryTrustedDomainInfoBySid.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_QueryTrustedDomainInfoBySid.info	Info	Label	1.2.0 to 4.4.2
lsarpc.lsa_QueryTrustedDomainInfoBySid.level	Level	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_RefDomainList.count	Count	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_RefDomainList.domains	Domains	Label	1.2.0 to 4.4.2
lsarpc.lsa_RefDomainList.max_size	Max Size	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_RemoveAccountRights.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_RemoveAccountRights.remove_all	Remove All	Unsigned integer (8 bits)	4.4.0 to 4.4.2
lsarpc.lsa_RemoveAccountRights.rights	Rights	Label	1.2.0 to 4.4.2
lsarpc.lsa_RemoveAccountRights.sid	Sid	Label	1.2.0 to 4.4.2
lsarpc.lsa_RemoveAccountRights.unknown	Unknown	Unsigned integer (32 bits)	1.2.0 to 4.2.9
lsarpc.lsa_RemovePrivilegesFromAccount.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_RemovePrivilegesFromAccount.privs	Privs	Label	1.2.0 to 4.4.2
lsarpc.lsa_RemovePrivilegesFromAccount.remove_all	Remove All	Unsigned integer (8 bits)	1.2.0 to 4.4.2
lsarpc.lsa_ReplicaSourceInfo.account	Account	Label	1.2.0 to 4.4.2
lsarpc.lsa_ReplicaSourceInfo.source	Source	Label	1.2.0 to 4.4.2
lsarpc.lsa_RetrievePrivateData.handle	Handle	Byte sequence	4.4.0 to 4.4.2
lsarpc.lsa_RetrievePrivateData.name	Name	Label	4.4.0 to 4.4.2
lsarpc.lsa_RetrievePrivateData.val	Val	Label	4.4.0 to 4.4.2
lsarpc.lsa_revision_info.info1	Info1	Label	4.4.0 to 4.4.2
lsarpc.lsa_revision_info1.revision	Revision	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_revision_info1.supported_features	Supported Features	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_RevisionSupportedFeature.LSA_FEATURE_TDO_AUTH_INFO_AES_CIPHER	LSA FEATURE TDO AUTH INFO AES CIPHER	Boolean	4.4.0 to 4.4.2
lsarpc.lsa_RightAttribute.name	Name	Character string	1.2.0 to 4.4.2
lsarpc.lsa_RightSet.count	Count	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_RightSet.names	Names	Label	1.2.0 to 4.4.2
lsarpc.lsa_SecretAccessMask.LSA_SECRET_QUERY_VALUE	LSA SECRET QUERY VALUE	Boolean	1.2.0 to 4.4.2
lsarpc.lsa_SecretAccessMask.LSA_SECRET_SET_VALUE	LSA SECRET SET VALUE	Boolean	1.2.0 to 4.4.2
lsarpc.lsa_ServerRole.role	Role	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_SetDomainInformationPolicy.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_SetDomainInformationPolicy.info	Info	Label	1.2.0 to 4.4.2
lsarpc.lsa_SetDomainInformationPolicy.level	Level	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_SetInfoPolicy.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_SetInfoPolicy.info	Info	Label	1.2.0 to 4.4.2
lsarpc.lsa_SetInfoPolicy.level	Level	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_SetInfoPolicy2.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_SetInfoPolicy2.info	Info	Label	1.2.0 to 4.4.2
lsarpc.lsa_SetInfoPolicy2.level	Level	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_SetInformationTrustedDomain.info	Info	Label	4.4.0 to 4.4.2
lsarpc.lsa_SetInformationTrustedDomain.level	Level	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_SetInformationTrustedDomain.trustdom_handle	Trustdom Handle	Byte sequence	4.4.0 to 4.4.2
lsarpc.lsa_SetSecObj.handle	Handle	Byte sequence	4.4.0 to 4.4.2
lsarpc.lsa_SetSecObj.sdbuf	Sdbuf	Label	4.4.0 to 4.4.2
lsarpc.lsa_SetSecObj.sec_info	Sec Info	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_SetSecret.new_val	New Val	Label	1.2.0 to 4.4.2
lsarpc.lsa_SetSecret.old_val	Old Val	Label	1.2.0 to 4.4.2
lsarpc.lsa_SetSecret.sec_handle	Sec Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_SetSystemAccessAccount.access_mask	Access Mask	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_SetSystemAccessAccount.handle	Handle	Byte sequence	4.4.0 to 4.4.2
lsarpc.lsa_SetTrustedDomainInfo.dom_sid	Dom Sid	Label	4.4.0 to 4.4.2
lsarpc.lsa_SetTrustedDomainInfo.handle	Handle	Byte sequence	4.4.0 to 4.4.2
lsarpc.lsa_SetTrustedDomainInfo.info	Info	Label	4.4.0 to 4.4.2
lsarpc.lsa_SetTrustedDomainInfo.level	Level	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_SetTrustedDomainInfoByName.handle	Handle	Byte sequence	1.2.0 to 4.4.2
lsarpc.lsa_SetTrustedDomainInfoByName.info	Info	Label	1.2.0 to 4.4.2
lsarpc.lsa_SetTrustedDomainInfoByName.level	Level	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_SetTrustedDomainInfoByName.trusted_domain	Trusted Domain	Label	1.2.0 to 4.4.2
lsarpc.lsa_SidArray.num_sids	Num Sids	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_SidArray.sids	Sids	Label	1.2.0 to 4.4.2
lsarpc.lsa_SidPtr.sid	Sid	Label	1.2.0 to 4.4.2
lsarpc.lsa_StorePrivateData.handle	Handle	Byte sequence	4.4.0 to 4.4.2
lsarpc.lsa_StorePrivateData.name	Name	Label	4.4.0 to 4.4.2
lsarpc.lsa_StorePrivateData.val	Val	Label	4.4.0 to 4.4.2
lsarpc.lsa_String.length	Length	Unsigned integer (16 bits)	1.2.0 to 4.4.2
lsarpc.lsa_String.size	Size	Unsigned integer (16 bits)	1.2.0 to 4.4.2
lsarpc.lsa_String.string	String	Unsigned integer (16 bits)	1.2.0 to 4.4.2
lsarpc.lsa_StringLarge.length	Length	Unsigned integer (16 bits)	1.2.0 to 4.4.2
lsarpc.lsa_StringLarge.size	Size	Unsigned integer (16 bits)	1.2.0 to 4.4.2
lsarpc.lsa_StringLarge.string	String	Unsigned integer (16 bits)	1.2.0 to 4.4.2
lsarpc.lsa_StringPointer.string	String	Label	1.2.0 to 4.2.9
lsarpc.lsa_Strings.count	Count	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_Strings.names	Names	Label	1.2.0 to 4.4.2
lsarpc.lsa_TranslatedName.name	Name	Label	1.2.0 to 4.4.2
lsarpc.lsa_TranslatedName.sid_index	Sid Index	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_TranslatedName.sid_type	Sid Type	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_TranslatedName2.name	Name	Label	1.2.0 to 4.4.2
lsarpc.lsa_TranslatedName2.sid_index	Sid Index	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_TranslatedName2.sid_type	Sid Type	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_TranslatedName2.unknown	Unknown	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_TranslatedSid.rid	Rid	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_TranslatedSid.sid_index	Sid Index	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_TranslatedSid.sid_type	Sid Type	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_TranslatedSid2.rid	Rid	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_TranslatedSid2.sid_index	Sid Index	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_TranslatedSid2.sid_type	Sid Type	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_TranslatedSid2.unknown	Unknown	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_TranslatedSid3.flags	Flags	Unsigned integer (32 bits)	4.4.0 to 4.4.2
lsarpc.lsa_TranslatedSid3.sid	Sid	Label	1.2.0 to 4.4.2
lsarpc.lsa_TranslatedSid3.sid_index	Sid Index	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_TranslatedSid3.sid_type	Sid Type	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_TranslatedSid3.unknown	Unknown	Unsigned integer (32 bits)	1.2.0 to 4.2.9
lsarpc.lsa_TransNameArray.count	Count	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_TransNameArray.names	Names	Label	1.2.0 to 4.4.2
lsarpc.lsa_TransNameArray2.count	Count	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_TransNameArray2.names	Names	Label	1.2.0 to 4.4.2
lsarpc.lsa_TransSidArray.count	Count	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_TransSidArray.sids	Sids	Label	1.2.0 to 4.4.2
lsarpc.lsa_TransSidArray2.count	Count	Unsigned integer (32 bits)	1.2.0 to 4.4.2
lsarpc.lsa_TransSidArray2.sids	Sids	Label	1.2.0 to 4.4.2
lsarpc.lsa_TransSidArray3.count	Count	Unsigned integer (32 bits)	1.2.0 to 4.4.2