audit_events

single: audit events
Audit events table
This table contains all events raised by 
sys.audit or 
PySys_Audit calls throughout the CPython runtime and the standard library. These calls were added in 3.8 or later (see 
578).
See 
sys.addaudithook and 
PySys_AddAuditHook for information on handling these events.
This table is generated from the CPython documentation, and may not represent events raised by other implementations. See your runtime specific documentation for actual events raised.
The following events are raised internally and do not correspond to any public API of CPython:
Audit event
Arguments
winapi.CreateFile
file_name, 
desired_access, 
share_mode, 
creation_disposition, 
flags_and_attributes
winapi.CreateJunction
src_path, 
dst_path
winapi.CreateNamedPipe
name, 
open_mode, 
pipe_mode
winapi.CreatePipe
winapi.CreateProcess
application_name, 
command_line, 
current_directory
winapi.OpenProcess
process_id, 
desired_access
winapi.TerminateProcess
handle, 
exit_code
posixsubprocess.fork_exec
exec_list, 
args, 
env
ctypes.PyObj_FromPtr
obj
3.14 The 
_posixsubprocess.fork_exec internal audit event.