mirror of
https://github.com/Yamato-Security/WELA.git
synced 2025-12-06 09:12:46 +01:00
fix: update auditing logic in WELA.ps1 to differentiate between 'No Auditing' and 'Disabled' settings
This commit is contained in:
4
WELA.ps1
4
WELA.ps1
@@ -5222,8 +5222,8 @@ function AuditLogSetting {
|
||||
|
||||
if ($outType -eq "std") {
|
||||
$auditResult | Group-Object -Property Category | ForEach-Object {
|
||||
$enabledCount = ($_.Group | Where-Object { $_.CurrentSetting -ne "No Auditing" } | ForEach-Object { $_.Rules.Count } | Measure-Object -Sum).Sum
|
||||
$disabledCount = ($_.Group | Where-Object { $_.CurrentSetting -eq "No Auditing" } | ForEach-Object { $_.Rules.Count } | Measure-Object -Sum).Sum
|
||||
$enabledCount = ($_.Group | Where-Object { $_.CurrentSetting -ne "No Auditing" -and $_.CurrentSetting -ne "Disabled" } | ForEach-Object { $_.Rules.Count } | Measure-Object -Sum).Sum
|
||||
$disabledCount = ($_.Group | Where-Object { $_.CurrentSetting -eq "No Auditing" -or $_.CurrentSetting -eq "Disabled" } | ForEach-Object { $_.Rules.Count } | Measure-Object -Sum).Sum
|
||||
$out = ""
|
||||
$color = ""
|
||||
if ($disabledCount -eq 0 -and $enabledCount -ne 0){
|
||||
|
||||
Reference in New Issue
Block a user