From 2351ba46392b000428847a37b63e01d9d26ba9a7 Mon Sep 17 00:00:00 2001
From: fukusuket <41001169+fukusuket@users.noreply.github.com>
Date: Mon, 10 Mar 2025 01:14:12 +0900
Subject: [PATCH] update

---
 .github/workflows/check-audit.yml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/.github/workflows/check-audit.yml b/.github/workflows/check-audit.yml
index 408431e8..584610eb 100644
--- a/.github/workflows/check-audit.yml
+++ b/.github/workflows/check-audit.yml
@@ -23,3 +23,16 @@ jobs:
 
       - name: Get-WinEvent -ListProvider *
         run: (Get-WinEvent -ListProvider Microsoft-Windows-Security-Auditing).Events | ForEach-Object { [PSCustomObject]@{EventID=$_.Id; Description=($_.Description -replace "`r`n", " ") -replace "\..*", ""} }
+
+      - name: Checkout self repository
+        uses: actions/checkout@v4
+
+      - name: Load audit settings(json)
+        run: |
+          $audit_settings = Get-Content -Path ./config/hayabusa_rules_meta.json -Raw | ConvertFrom-Json
+          $audit_settings
+
+      - name: Load audit settings(csv)
+        run: |
+            $audit_settings = Import-Csv .config/eid_subcategory_mapping.csv
+            $audit_settings
\ No newline at end of file