mirror of
https://github.com/Yamato-Security/WELA.git
synced 2025-12-06 17:22:50 +01:00
update
This commit is contained in:
@@ -3,16 +3,13 @@ $outputFilePath = "auditpol_output.txt"
|
||||
Start-Process -FilePath "cmd.exe" -ArgumentList "/c chcp 437 & auditpol /get /category:* /r > $outputFilePath" -NoNewWindow -Wait
|
||||
$auditpolOutput = Get-Content -Path $outputFilePath
|
||||
$filteredOutput = $auditpolOutput | Select-String -NotMatch "No Auditing"
|
||||
Write-Host "DEBUG2"
|
||||
$extractedStrings = [System.Collections.Generic.HashSet[string]]::new()
|
||||
Write-Host "DEBUG"
|
||||
$filteredOutput | ForEach-Object {
|
||||
if ($_ -match '{(.*?)}') {
|
||||
$extractedStrings.Add($matches[1])
|
||||
}
|
||||
}
|
||||
|
||||
Write-Host "Extracted GUIDs:"
|
||||
Write-Host $extractedStrings
|
||||
|
||||
# Step 2: Read the rules from security_rules.json
|
||||
$jsonFilePath = "./config/security_rules.json"
|
||||
|
||||
Reference in New Issue
Block a user