From d87a05bb002e46c58953b4e0bc348dc6618a5fac Mon Sep 17 00:00:00 2001
From: fukusuket <41001169+fukusuket@users.noreply.github.com>
Date: Thu, 17 Apr 2025 23:57:20 +0900
Subject: [PATCH] feat: check size setting

---
 WELA.ps1 | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/WELA.ps1 b/WELA.ps1
index 1b23c7cb..edb900c4 100644
--- a/WELA.ps1
+++ b/WELA.ps1
@@ -1440,6 +1440,7 @@ function AuditFileSize {
         "Microsoft-Windows-Bits-Client/Operational" = @("1 MB", "128 MB+")
         "Microsoft-Windows-CodeIntegrity/Operational" = @("1 MB", "128 MB+")
         "Microsoft-Windows-DriverFrameworks-UserMode/Operational" = @("1 MB", "128 MB+")
+        "Microsoft-Windows-NTLM/Operational" = @("1 MB", "128 MB+")
         "Microsoft-Windows-PowerShell/Operational" = @("20 MB", "256 MB+")
         "Microsoft-Windows-PrintService/Admin" = @("1 MB", "128 MB+")
         "Microsoft-Windows-PrintService/Operational" = @("1 MB", "128 MB+")
@@ -1450,6 +1451,7 @@ function AuditFileSize {
         "Microsoft-Windows-TerminalServices-LocalSessionManager/Operational" = @("1 MB", "128 MB+")
         "Microsoft-Windows-Windows Defender/Operational" = @("16MB", "128MB+")
         "Microsoft-Windows-Windows Firewall With Advanced Security/Firewall" = @("1 MB", "256 MB+")
+        "Microsoft-Windows-WMI-Activity/Operational" = @("1 MB", "128 MB+")
         "Security" = @("20 MB", "256 MB+")
         "System" = @("20 MB", "128 MB+")
         "Windows PowerShell" = @("15 MB", "256 MB+")