2024-01-02: Site is back on track, self-hosted on a rpi because you get the Internet you fund.
2025-02-06: Oh well, some power grid issues caused the rpi to reboot, I really should configure uwsgi to restart automatically --'

0cce921a-69ae-11d9-bed3-505054503030
Audit_Logon_IPSecUserMode

0cce921a-69ae-11d9-bed3-505054503030 2005-01-19 00:07:04⋮30682· 77da Audit_Logon_IPSecUserMode

Seen in MS-{GPAC}

Counts : MS-GPAC:3
-1 MS specs regex push
ms_auditpol:IPsec Extended Mode

from https://p0w3rsh3ll.wordpress.com/2016/11/14/audit-policy-and-dsc/
0 schema_nt4.txt microsoft search schema catalog config
ms_audithash:Audit_Logon_IPSecUserMode

from https://www.powershellgallery.com/packages/BaselineManagement/2.4.1000/Content/Helpers%5CEnumerations.ps1
0 schema_nt4.txt microsoft search schema catalog config
ms_auditsubcathash:IPsec Extended Mode

from https://www.powershellgallery.com/packages/BaselineManagement/2.4.1000/Content/Helpers%5CEnumerations.ps1
0 schema_nt4.txt microsoft search schema catalog config
ms_audit_subcat:Audit_Logon_IPSecUserMode

0 autopush - ms_audit
Audit_Logon_IPSecUserMode

Windows SDK 6.0
file: NTSecAPI.h

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - wdk6.xml
0 autopush - wdk6
Audit_Logon_IPSecUserMode

DEFINE_GUID in /home/user/uuid/winsdk/winsdk-10/Include/10.0.16299.0/um/NTSecAPI.h
-1 winsdk
Audit_Logon_IPSecUserMode

DEFINE_GUID in /home/user/uuid/winsdk/winsdk-10/Include/10.0.10240.0/um/NTSecAPI.h
-1 winsdk
Audit_Logon_IPSecUserMode

DEFINE_GUID in /home/user/uuid/winsdk/winsdk-10/Include/10.0.14393.0/um/NTSecAPI.h
-1 winsdk
Include/10.0.16299.0/um/NTSecAPI.h:156

/* 0cce921a-69ae-11d9-bed3-505054503030 */
in Include/10.0.16299.0/um/NTSecAPI.h:156
-2