Add version-aware opt-in SMB audit policy controls

This commit is contained in:
Shirofune-Security committed 2026-09-19 02:33:13 +09:00
1 parent c45f7a1319
commit 2ea509700b
11 files changed
+494 -3

No files matched your search

+1 -1
View File
@@ -94,7 +94,7 @@ function Invoke-WelaConfigurationControl {
function Complete-WelaConfiguration {
param($Context, [string]$ResultsPath, $Plan,
[ValidateSet("native-windows-configuration", "advanced-audit-policy-only")]
[ValidateSet("native-windows-configuration", "advanced-audit-policy-only", "smb-audit-policies-only")]
[string]$Scope = "native-windows-configuration")
# A second read detects a value that was compliant earlier but changed during
# this run. It does not establish whether GPO or another writer caused drift.