From 688ed377438b6935ed01f9c984877b963bca29a2 Mon Sep 17 00:00:00 2001 From: fukusuket <41001169+fukusuket@users.noreply.github.com> Date: Fri, 14 Mar 2025 18:41:40 +0900 Subject: [PATCH] update --- WELA.ps1 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/WELA.ps1 b/WELA.ps1 index 522eae93..610531b9 100644 --- a/WELA.ps1 +++ b/WELA.ps1 @@ -68,7 +68,6 @@ $usablePwshCounts = $usablePwshRules | Group-Object -Property level | ForEach-Ob } } - # Step 5: Calculate the percentages $usableSecPercentages = $usableSecCounts | ForEach-Object { $total = ($totalCounts | Where-Object Level -match $PSItem.Level | Select-Object -ExpandProperty Count)[0] @@ -99,6 +98,7 @@ $usableSecPercentages | ForEach-Object { Write-Output "$($_.Level) rules: $($_.UsableCount) / $($_.TotalCount) ($($_.Percentage)%)" } +Write-Output "" Write-Output "PowerShell event log detection rules:" $usablePwshPercentages = $usablePwshPercentages | Sort-Object { $customOrder.IndexOf($_.Level) } $usablePwshPercentages | ForEach-Object {