mirror of
https://github.com/Yamato-Security/WELA.git
synced 2026-07-23 00:55:41 +02:00
docs: add Material for MkDocs documentation site (English + Japanese)
Add a documentation website under website/, built from README.md and README-Japanese.md and laid out with top-tab topics and a left sidebar (same style as the Hayabusa docs). Designed to be hosted free on GitHub Pages. - Pages: Overview (About, Features, Screenshots), Getting Started, Commands (Command List, Command Usage), Resources (Companion Projects, Other Resources, Changelog, Contributing) - Custom landing page, theme, click-to-zoom screenshots - Changelog synced from CHANGELOG.md at build time - 15-language switcher via mkdocs-static-i18n: English + Japanese full content; the other 13 localize the UI and fall back to English until translated - .github/workflows/docs.yml builds (mkdocs --strict) + deploys to GitHub Pages Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
co-authored by
Claude Opus 4.8
parent
afe91eea3b
commit
a95f0f5eec
@@ -0,0 +1,5 @@
|
||||
# コマンド一覧
|
||||
- `audit-settings`: Windowsイベントログ監査ポリシー設定を評価する
|
||||
- `audit-filesize`: Windowsイベントログファイルサイズを評価する
|
||||
- `configure`: 推奨のWindowsイベントログ監査ポリシーとファイズサイズを設定する
|
||||
- `update-rules`: WELAのSigmaルール設定ファイルを更新する
|
||||
@@ -0,0 +1,5 @@
|
||||
# Command List
|
||||
- `audit-settings`: Check Windows event log audit policy settings.
|
||||
- `audit-filesize`: Check Windows event log file size.
|
||||
- `configure`: Configure recommended Windows event log audit policy and file size.
|
||||
- `update-rules`: Update WELA's Sigma rules config files.
|
||||
@@ -0,0 +1,55 @@
|
||||
# コマンド使用例
|
||||
## audit-settings
|
||||
`audit-settings`コマンドは、Windowsイベントログ監査ポリシー設定を評価し、[Yamato Security](https://github.com/Yamato-Security/EnableWindowsLogSettings)、[Microsoft(Sever/Client)](https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/audit-policy-recommendations)、[Australian Signals Directorate (ASD)](https://www.cyber.gov.au/resources-business-and-government/maintaining-devices-and-systems/system-hardening-and-administration/system-monitoring/windows-event-logging-and-forwarding)の推奨設定と比較します。
|
||||
RuleCountは、そのカテゴリ内のイベントを検出できる[Sigmaルール](https://github.com/SigmaHQ/sigma)の数を示します。
|
||||
|
||||
#### `audit-settings` command examples
|
||||
YamatoSecurityの推奨設定でチェックし、CSV形式で保存する:
|
||||
```
|
||||
./WELA.ps1 audit-settings -Baseline YamatoSecurity
|
||||
```
|
||||
|
||||
Australian Signals Directorateの推奨設定でチェックし、CSV形式で保存する:
|
||||
```
|
||||
./WELA.ps1 audit-settings -Baseline ASD
|
||||
```
|
||||
|
||||
Microsoftの推奨設定(Server)でチェックし、GUI形式で表示する:
|
||||
```
|
||||
./WELA.ps1 audit-settings -Baseline Microsoft_Server -OutType gui
|
||||
```
|
||||
|
||||
Microsoftの推奨設定(Client)でチェックし、Table形式で表示する:
|
||||
```
|
||||
./WELA.ps1 audit-settings -Baseline Microsoft_Client -OutType table
|
||||
```
|
||||
|
||||
## audit-filesize
|
||||
`audit-filesize`コマンドは、Windowsイベントログファイルサイズを評価し、Yamato Securityの推奨設定と比較します。
|
||||
|
||||
#### `audit-filesize` command examples
|
||||
WindowsイベントログファイルサイズをYamatoSecurityの推奨設定でチェックし、CSV形式で保存する:
|
||||
```
|
||||
./WELA.ps1 audit-filesize -Baseline YamatoSecurity
|
||||
```
|
||||
|
||||
## configure
|
||||
`configure`コマンドは、推奨のWindowsイベントログ監査ポリシーとファイルサイズを設定します。
|
||||
|
||||
#### `configure` command examples
|
||||
Yamato Securityの推奨設定を適用する(設定変更時に確認プロンプトを表示):
|
||||
```
|
||||
./WELA.ps1 configure -Baseline YamatoSecurity
|
||||
```
|
||||
|
||||
Australian Signals Directorateの推奨設定を自動で適用する:
|
||||
```
|
||||
./WELA.ps1 configure -Baseline ASD -auto
|
||||
```
|
||||
|
||||
## update-rules
|
||||
#### `update-rules` command examples
|
||||
WELAのSigmaルール設定ファイルを更新する:
|
||||
```
|
||||
./WELA.ps1 update-rules
|
||||
```
|
||||
@@ -0,0 +1,55 @@
|
||||
# Command Usage
|
||||
## audit-settings
|
||||
The `audit-settings` command checks the Windows event log audit policy settings and compares them with the recommended settings from [Yamato Security](https://github.com/Yamato-Security/EnableWindowsLogSettings), [Microsoft(Sever/Client)](https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/audit-policy-recommendations), and [Australian Signals Directorate (ASD)](https://www.cyber.gov.au/resources-business-and-government/maintaining-devices-and-systems/system-hardening-and-administration/system-monitoring/windows-event-logging-and-forwarding).
|
||||
`RuleCount` indicates the number of [Sigma rules](https://github.com/SigmaHQ/sigma) that can detect events within that category.
|
||||
|
||||
### `audit-settings` command examples
|
||||
Check with the default Yamato Security's recommended settings and save results to CSV:
|
||||
```
|
||||
./WELA.ps1 audit-settings -Baseline YamatoSecurity
|
||||
```
|
||||
|
||||
Check with the Australian Signals Directorate's recommended settings and save results to CSV:
|
||||
```
|
||||
./WELA.ps1 audit-settings -Baseline ASD
|
||||
```
|
||||
|
||||
Check with Microsoft's recommended Server OS settings and display results in a GUI:
|
||||
```
|
||||
./WELA.ps1 audit-settings -Baseline Microsoft_Server -OutType gui
|
||||
```
|
||||
|
||||
Check with Microsoft's recommended Client OS settings and display results in table format:
|
||||
```
|
||||
./WELA.ps1 audit-settings -Baseline Microsoft_Client -OutType table
|
||||
```
|
||||
|
||||
## audit-filesize
|
||||
The `audit-filesize` command checks the Windows event logs' file size and compares them with the recommended settings from Yamato Security's recommendations.
|
||||
|
||||
### `audit-filesize` command examples
|
||||
Check the Windows event log file size with Yamato Security's recommendations and save results to CSV:
|
||||
```
|
||||
./WELA.ps1 audit-filesize -Baseline YamatoSecurity
|
||||
```
|
||||
|
||||
## configure
|
||||
The `configure` command sets the recommended Windows event log audit policy and file size.
|
||||
|
||||
#### `configure` command examples
|
||||
Apply Yamato Security's recommended settings (with confirmation prompt before changing settings):
|
||||
```
|
||||
./WELA.ps1 configure -Baseline YamatoSecurity
|
||||
```
|
||||
|
||||
Apply Australian Signals Directorate's recommended settings without confirmation prompt:
|
||||
```
|
||||
./WELA.ps1 configure -Baseline ASD -auto
|
||||
```
|
||||
|
||||
## update-rules
|
||||
#### `update-rules` command examples
|
||||
Update WELA's Sigma rules config files:
|
||||
```
|
||||
./WELA.ps1 update-rules
|
||||
```
|
||||
Reference in New Issue
Block a user