From 4fa0715e51d21fadbdca399ee4733d89355c6e44 Mon Sep 17 00:00:00 2001
From: fukusuket <41001169+fukusuket@users.noreply.github.com>
Date: Sun, 13 Apr 2025 22:12:57 +0900
Subject: [PATCH] fix: process creation

---
 WELA.ps1 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/WELA.ps1 b/WELA.ps1
index eee6958d..a00371bf 100644
--- a/WELA.ps1
+++ b/WELA.ps1
@@ -361,7 +361,7 @@ function AuditLogSetting {
     )
 
     #### Process Creation
-    $guid    = "0CCE9248-69AE-11D9-BED3-505054503030"
+    $guid    = "0CCE922B-69AE-11D9-BED3-505054503030"
     $eids     = @()
     $channels = @("sec")
     $enabled  = $enabledguid -contains $guid