From 54a3b62d5b71e2275b61473cfee1855b76419bf2 Mon Sep 17 00:00:00 2001
From: fukusuket <41001169+fukusuket@users.noreply.github.com>
Date: Sun, 13 Apr 2025 22:13:50 +0900
Subject: [PATCH] fix: process termination

---
 WELA.ps1 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/WELA.ps1 b/WELA.ps1
index a00371bf..cae19d79 100644
--- a/WELA.ps1
+++ b/WELA.ps1
@@ -378,7 +378,7 @@ function AuditLogSetting {
     )
 
     #### Process Termination
-    $guid    = "0CCE922B-69AE-11D9-BED3-505054503030"
+    $guid    = "0CCE922C-69AE-11D9-BED3-505054503030"
     $eids     = @()
     $channels = @("sec")
     $enabled  = $enabledguid -contains $guid