mirror of
https://github.com/Yamato-Security/WELA.git
synced 2025-12-06 09:12:46 +01:00
doc: add readme
This commit is contained in:
@@ -64,6 +64,9 @@ WELA helps identify these issues and provides actionable recommendations to impr
|
||||

|
||||
|
||||
# Features
|
||||
- **Audit Windows Event Log settings**: Check the current settings of Windows Event Logs and compare them with recommended settings.
|
||||
- Checking Windows Event Log audit settings based on **real-world Sigma rule detectability**.
|
||||
- **Audit Windows Event Log file sizes**: Check the current file sizes of Windows Event Logs and compare them with recommended settings.
|
||||
|
||||
# Prerequisites
|
||||
* PowerShell 5.1+
|
||||
@@ -78,11 +81,6 @@ Please download the latest stable version of WELA from the [Releases](https://gi
|
||||
2. Open PowerShell with **Administrator privileges**.
|
||||
3. `./WELA.ps1 help` to run WELA.
|
||||
|
||||
# Command List
|
||||
* `audit-settings`: Audit Windows Event Log settings
|
||||
* `audit-filesize`: Audit Windows Event Log file sizes
|
||||
* `update-rules` : Update Sigma contents in config directory
|
||||
|
||||
# Command Usage
|
||||
## audit-settings
|
||||
## audit-filesize
|
||||
|
||||
Reference in New Issue
Block a user