diff --git a/WELA.ps1 b/WELA.ps1
index 1b23c7cb..edb900c4 100644
--- a/WELA.ps1
+++ b/WELA.ps1
@@ -1440,6 +1440,7 @@ function AuditFileSize {
         "Microsoft-Windows-Bits-Client/Operational" = @("1 MB", "128 MB+")
         "Microsoft-Windows-CodeIntegrity/Operational" = @("1 MB", "128 MB+")
         "Microsoft-Windows-DriverFrameworks-UserMode/Operational" = @("1 MB", "128 MB+")
+        "Microsoft-Windows-NTLM/Operational" = @("1 MB", "128 MB+")
         "Microsoft-Windows-PowerShell/Operational" = @("20 MB", "256 MB+")
         "Microsoft-Windows-PrintService/Admin" = @("1 MB", "128 MB+")
         "Microsoft-Windows-PrintService/Operational" = @("1 MB", "128 MB+")
@@ -1450,6 +1451,7 @@ function AuditFileSize {
         "Microsoft-Windows-TerminalServices-LocalSessionManager/Operational" = @("1 MB", "128 MB+")
         "Microsoft-Windows-Windows Defender/Operational" = @("16MB", "128MB+")
         "Microsoft-Windows-Windows Firewall With Advanced Security/Firewall" = @("1 MB", "256 MB+")
+        "Microsoft-Windows-WMI-Activity/Operational" = @("1 MB", "128 MB+")
         "Security" = @("20 MB", "256 MB+")
         "System" = @("20 MB", "128 MB+")
         "Windows PowerShell" = @("15 MB", "256 MB+")