From 9d2d60a77aa81f45d60cee8c8a2a091c585fb4aa Mon Sep 17 00:00:00 2001
From: fukusuket <41001169+fukusuket@users.noreply.github.com>
Date: Sun, 16 Nov 2025 17:26:38 +0900
Subject: [PATCH] fix: adjust default value for PowerShell operational logging

---
 WELA.ps1 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/WELA.ps1 b/WELA.ps1
index 4bc9f89e..3daa2971 100644
--- a/WELA.ps1
+++ b/WELA.ps1
@@ -5412,7 +5412,7 @@ function AuditFileSize {
         "Microsoft-Windows-Crypto-DPAPI/Debug" = @("1 MB", "128 MB+")
         "Microsoft-Windows-DriverFrameworks-UserMode/Operational" = @("1 MB", "128 MB+")
         "Microsoft-Windows-NTLM/Operational" = @("1 MB", "128 MB+")
-        "Microsoft-Windows-PowerShell/Operational" = @("20 MB", "256 MB+")
+        "Microsoft-Windows-PowerShell/Operational" = @("15 MB", "256 MB+")
         "Microsoft-Windows-PrintService/Admin" = @("1 MB", "128 MB+")
         "Microsoft-Windows-PrintService/Operational" = @("1 MB", "128 MB+")
         "Microsoft-Windows-Security-Mitigations/KernelMode" = @("1 MB", "128 MB+")