From 5cfff69738e85be745ec8c55455bf9730f6c5a19 Mon Sep 17 00:00:00 2001 From: fukusuket <41001169+fukusuket@users.noreply.github.com> Date: Thu, 17 Apr 2025 23:44:26 +0900 Subject: [PATCH] feat: check size setting --- WELA.ps1 | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/WELA.ps1 b/WELA.ps1 index 6df2c151..3067c50c 100644 --- a/WELA.ps1 +++ b/WELA.ps1 @@ -1440,7 +1440,7 @@ function AuditFileSize { "Microsoft-Windows-Bits-Client/Operational" = @("1MB", "128MB+") "Microsoft-Windows-CodeIntegrity/Operational" = @("1MB", "128MB+") "Microsoft-Windows-DriverFrameworks-UserMode/Operational" = @("1MB", "128MB+") - "Microsoft-Windows-PowerShell/Operational" = @("20MB", "TBD") + "Microsoft-Windows-PowerShell/Operational" = @("20MB", "256MB+") "Microsoft-Windows-PrintService/Admin" = @("1MB", "128MB+") "Microsoft-Windows-PrintService/Operational" = @("1MB", "128MB+") "Microsoft-Windows-Security-Mitigations/KernelMode" = @("1MB", "128MB+") @@ -1452,7 +1452,7 @@ function AuditFileSize { "Microsoft-Windows-Windows Firewall With Advanced Security/Firewall" = @("1MB", "256MB+") "Security" = @("20MB", "256MB+") "System" = @("20MB", "128MB+") - "Windows PowerShell" = @("15MB", "TBD") + "Windows PowerShell" = @("15MB", "256MB+") } $results = @() @@ -1461,10 +1461,10 @@ function AuditFileSize { $logInfo = Get-WinEvent -ListLog $logName -ErrorAction Stop $results += [PSCustomObject]@{ LogName = $logInfo.LogName - LogSize = "{0:N2} MB" -f ($logInfo.FileSize / 1MB) + CurrentLogSize = "{0:N2} MB" -f ($logInfo.FileSize / 1MB) MaxLogSize = "{0:N2} MB" -f ($logInfo.MaximumSizeInBytes / 1MB) - Description1 = $logNames[$logName][0] # - Description2 = $logNames[$logName][1] # + Default = $logNames[$logName][0] # + Recommended = $logNames[$logName][1] # } }