CSEC_PUBLIC/WELA
1
0
Fork 0
mirror of https://github.com/Yamato-Security/WELA.git synced 2025-12-06 17:22:50 +01:00
Code Issues Packages Projects Releases Wiki Activity

update

Browse Source
This commit is contained in:
fukusuket
2025-03-13 23:46:46 +09:00
parent bb9b35bcca
commit b7bc934aa5
1 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
WELA.ps1
View File

@@ -1,3 +1,7 @@
# Step 1: Run the auditpol command using cmd.exe and redirect its output to a file
$outputFilePath = "auditpol_output.txt"
Start-Process -FilePath "cmd.exe" -ArgumentList "/c chcp 437 & auditpol /get /category:* /r" -NoNewWindow -Wait -RedirectStandardOutput $outputFilePath
$logo = @" $logo = @"
┏┓┏┓┏┳━━━┳┓ ┏━━━┓ ┏┓┏┓┏┳━━━┳┓ ┏━━━┓
┃┃┃┃┃┃┏━━┫┃ ┃┏━┓┃ ┃┃┃┃┃┃┏━━┫┃ ┃┏━┓┃
@@ -11,9 +15,6 @@ $logo = @"
Write-Host $logo -ForegroundColor Green Write-Host $logo -ForegroundColor Green
# Step 1: Run the auditpol command using cmd.exe and redirect its output to a file
$outputFilePath = "auditpol_output.txt"
Start-Process -FilePath "cmd.exe" -ArgumentList "/c chcp 437 & auditpol /get /category:* /r" -NoNewWindow -Wait -RedirectStandardOutput $outputFilePath
$auditpolOutput = Get-Content -Path $outputFilePath $auditpolOutput = Get-Content -Path $outputFilePath
$filteredOutput = $auditpolOutput | Select-String -NotMatch "No Auditing" $filteredOutput = $auditpolOutput | Select-String -NotMatch "No Auditing"
$extractedStrings = [System.Collections.Generic.HashSet[string]]::new() $extractedStrings = [System.Collections.Generic.HashSet[string]]::new()
@@ -86,8 +87,6 @@ $unusablePercentages = $unusableCounts | ForEach-Object {
# Step 6: Generate the required outputtotal # Step 6: Generate the required outputtotal
$customOrder = @("critical", "high", "medium", "low", "informational") $customOrder = @("critical", "high", "medium", "low", "informational")
Write-Output "Checking event log audit settings. Please wait."
Write-Output ""
Write-Output "Detection rules that can be used on this system versus total possible rules:" Write-Output "Detection rules that can be used on this system versus total possible rules:"
$usablePercentages = $usablePercentages | Sort-Object { $customOrder.IndexOf($_.Level) } $usablePercentages = $usablePercentages | Sort-Object { $customOrder.IndexOf($_.Level) }
$usablePercentages | ForEach-Object { $usablePercentages | ForEach-Object {