mirror of
https://github.com/Yamato-Security/WELA.git
synced 2025-12-06 17:22:50 +01:00
update
This commit is contained in:
2
WELA.ps1
2
WELA.ps1
@@ -68,7 +68,6 @@ $usablePwshCounts = $usablePwshRules | Group-Object -Property level | ForEach-Ob
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
# Step 5: Calculate the percentages
|
# Step 5: Calculate the percentages
|
||||||
$usableSecPercentages = $usableSecCounts | ForEach-Object {
|
$usableSecPercentages = $usableSecCounts | ForEach-Object {
|
||||||
$total = ($totalCounts | Where-Object Level -match $PSItem.Level | Select-Object -ExpandProperty Count)[0]
|
$total = ($totalCounts | Where-Object Level -match $PSItem.Level | Select-Object -ExpandProperty Count)[0]
|
||||||
@@ -99,6 +98,7 @@ $usableSecPercentages | ForEach-Object {
|
|||||||
Write-Output "$($_.Level) rules: $($_.UsableCount) / $($_.TotalCount) ($($_.Percentage)%)"
|
Write-Output "$($_.Level) rules: $($_.UsableCount) / $($_.TotalCount) ($($_.Percentage)%)"
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Write-Output ""
|
||||||
Write-Output "PowerShell event log detection rules:"
|
Write-Output "PowerShell event log detection rules:"
|
||||||
$usablePwshPercentages = $usablePwshPercentages | Sort-Object { $customOrder.IndexOf($_.Level) }
|
$usablePwshPercentages = $usablePwshPercentages | Sort-Object { $customOrder.IndexOf($_.Level) }
|
||||||
$usablePwshPercentages | ForEach-Object {
|
$usablePwshPercentages | ForEach-Object {
|
||||||
|
|||||||
Reference in New Issue
Block a user