diff --git a/README.md b/README.md index 08c5f7a3..af481af0 100644 --- a/README.md +++ b/README.md @@ -64,9 +64,10 @@ WELA helps identify these issues and provides actionable recommendations to impr ![WELA FileSize](screenshots/filesize.png) # Features -- **Audit Windows Event Log Audit policy settings**: Check the current settings of Windows Event Logs and compare them with recommended settings. +- Audit Windows Event Log Audit policy settings +- Checking based on the major Windows Event Log Audit configuration guides - Checking Windows Event Log audit settings based on **real-world Sigma rule detectability**. -- **Audit Windows Event Log file sizes**: Check the current file sizes of Windows Event Logs and compare them with recommended settings. +- Audit Windows Event Log file sizes and suggest the recommended size. # Prerequisites * PowerShell 5.1+