From 56290b27714aebc53513fd10ad898f1c5fc40788 Mon Sep 17 00:00:00 2001
From: fukusuket <41001169+fukusuket@users.noreply.github.com>
Date: Sat, 15 Mar 2025 18:23:39 +0900
Subject: [PATCH] update

---
 WELA.ps1 | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/WELA.ps1 b/WELA.ps1
index 4600fd12..59d6b5a2 100644
--- a/WELA.ps1
+++ b/WELA.ps1
@@ -122,16 +122,18 @@ $usableSecRules = $rules | Where-Object { $_.applicable -eq $true -and $_.channe
 $usablePwsRules = $rules | Where-Object { $_.applicable -eq $true -and $_.channel -eq "pwsh" }
 $unusableRules  = $rules | Where-Object { $_.applicable -eq $false }
 $allSecRules    = $rules | Where-Object { $_.channel -eq "sec" }
+$allPwsRules    = $rules | Where-Object { $_.channel -eq "pwsh" }
 
 # Step 4: Count the number of usable and unusable rules for each level
 $totalCounts     = Get-RuleCounts -rules $rules
 $totalSecCounts  = Get-RuleCounts -rules $allSecRules
+$totalPwsCounts  = Get-RuleCounts -rules $allPwsRules
 $usableSecCounts = Get-RuleCounts -rules $usableSecRules
 $usablePwsCounts = Get-RuleCounts -rules $usablePwsRules
 
 # Step 5: Calculate the usable rate for each level
 $usableSecRate = CalculateUsableRate -counts $usableSecCounts -totalCounts $totalSecCounts
-$usablePwsRate = CalculateUsableRate -counts $usablePwsCounts -totalCounts $usablePwsCounts
+$usablePwsRate = CalculateUsableRate -counts $usablePwsCounts -totalCounts $totalPwsCounts
 
 # Step 6: Show the number of usable and unusable rules for each level
 ShowRulesCountsByLevel -usableRate $usableSecRate -msg "Security event log detection rules:"