winapi::um::ntlsa
pub const iLogon_Logoff: POLICY_AUDIT_EVENT_TYPE_EX = iLogon_Logon + 1u32; // 106u32