From b8b591f41e8049da15e04d2bcf17b69a8afa196b Mon Sep 17 00:00:00 2001
From: fukusuket <41001169+fukusuket@users.noreply.github.com>
Date: Sun, 16 Nov 2025 17:14:22 +0900
Subject: [PATCH] fix: update default auditing values in WELA.ps1

---
 WELA.ps1 | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/WELA.ps1 b/WELA.ps1
index f5b9985c..4bc9f89e 100644
--- a/WELA.ps1
+++ b/WELA.ps1
@@ -578,7 +578,7 @@ function GuideYamatoSecurity
             "Other Account Management Events",
             $auditpol[$guid],
             [array]$rules,
-            "No Auditing",
+            "Success",
             "Success and Failure",
             "Low",
             ""
@@ -596,7 +596,7 @@ function GuideYamatoSecurity
             "Security Group Management",
             $auditpol[$guid],
             [array]$rules,
-            "No Auditing",
+            "Success",
             "Success and Failure",
             "Low",
             ""
@@ -1384,7 +1384,7 @@ function GuideYamatoSecurity
             "",
             $current,
             [array]$rules,
-            "Enabled",
+            "Disabled",
             "Enabled",
             "",
             ""
@@ -1815,7 +1815,7 @@ function GuideASD {
             "Other Account Management Events",
             $auditpol[$guid],
             [array]$rules,
-            "No Auditing",
+            "Success",
             "Success and Failure",
             "",
             ""
@@ -1833,7 +1833,7 @@ function GuideASD {
             "Security Group Management",
             $auditpol[$guid],
             [array]$rules,
-            "No Auditing",
+            "Success",
             "Success and Failure",
             "",
             ""
@@ -2621,7 +2621,7 @@ function GuideASD {
             "",
             $current,
             [array]$rules,
-            "Enabled",
+            "Disabled",
             "",
             "",
             ""
@@ -3052,7 +3052,7 @@ function GuideMSC {
             "Other Account Management Events",
             $auditpol[$guid],
             [array]$rules,
-            "No Auditing",
+            "Success",
             "Success",
             "",
             ""
@@ -3070,7 +3070,7 @@ function GuideMSC {
             "Security Group Management",
             $auditpol[$guid],
             [array]$rules,
-            "No Auditing",
+            "Success",
             "Success",
             "",
             ""
@@ -3858,7 +3858,7 @@ function GuideMSC {
             "",
             $current,
             [array]$rules,
-            "Enabled",
+            "Disabled",
             "",
             "",
             ""
@@ -4289,7 +4289,7 @@ function GuideMSS {
             "Other Account Management Events",
             $auditpol[$guid],
             [array]$rules,
-            "No Auditing",
+            "Success",
             "Success and Failure",
             "",
             ""
@@ -4307,7 +4307,7 @@ function GuideMSS {
             "Security Group Management",
             $auditpol[$guid],
             [array]$rules,
-            "No Auditing",
+            "Success",
             "Success and Failure",
             "",
             ""
@@ -5095,7 +5095,7 @@ function GuideMSS {
             "",
             $current,
             [array]$rules,
-            "Enabled",
+            "Disabled",
             "",
             "",
             ""