mirror of
https://github.com/Yamato-Security/WELA.git
synced 2025-12-06 09:12:46 +01:00
feat: check size setting
This commit is contained in:
2
WELA.ps1
2
WELA.ps1
@@ -1440,6 +1440,7 @@ function AuditFileSize {
|
|||||||
"Microsoft-Windows-Bits-Client/Operational" = @("1 MB", "128 MB+")
|
"Microsoft-Windows-Bits-Client/Operational" = @("1 MB", "128 MB+")
|
||||||
"Microsoft-Windows-CodeIntegrity/Operational" = @("1 MB", "128 MB+")
|
"Microsoft-Windows-CodeIntegrity/Operational" = @("1 MB", "128 MB+")
|
||||||
"Microsoft-Windows-DriverFrameworks-UserMode/Operational" = @("1 MB", "128 MB+")
|
"Microsoft-Windows-DriverFrameworks-UserMode/Operational" = @("1 MB", "128 MB+")
|
||||||
|
"Microsoft-Windows-NTLM/Operational" = @("1 MB", "128 MB+")
|
||||||
"Microsoft-Windows-PowerShell/Operational" = @("20 MB", "256 MB+")
|
"Microsoft-Windows-PowerShell/Operational" = @("20 MB", "256 MB+")
|
||||||
"Microsoft-Windows-PrintService/Admin" = @("1 MB", "128 MB+")
|
"Microsoft-Windows-PrintService/Admin" = @("1 MB", "128 MB+")
|
||||||
"Microsoft-Windows-PrintService/Operational" = @("1 MB", "128 MB+")
|
"Microsoft-Windows-PrintService/Operational" = @("1 MB", "128 MB+")
|
||||||
@@ -1450,6 +1451,7 @@ function AuditFileSize {
|
|||||||
"Microsoft-Windows-TerminalServices-LocalSessionManager/Operational" = @("1 MB", "128 MB+")
|
"Microsoft-Windows-TerminalServices-LocalSessionManager/Operational" = @("1 MB", "128 MB+")
|
||||||
"Microsoft-Windows-Windows Defender/Operational" = @("16MB", "128MB+")
|
"Microsoft-Windows-Windows Defender/Operational" = @("16MB", "128MB+")
|
||||||
"Microsoft-Windows-Windows Firewall With Advanced Security/Firewall" = @("1 MB", "256 MB+")
|
"Microsoft-Windows-Windows Firewall With Advanced Security/Firewall" = @("1 MB", "256 MB+")
|
||||||
|
"Microsoft-Windows-WMI-Activity/Operational" = @("1 MB", "128 MB+")
|
||||||
"Security" = @("20 MB", "256 MB+")
|
"Security" = @("20 MB", "256 MB+")
|
||||||
"System" = @("20 MB", "128 MB+")
|
"System" = @("20 MB", "128 MB+")
|
||||||
"Windows PowerShell" = @("15 MB", "256 MB+")
|
"Windows PowerShell" = @("15 MB", "256 MB+")
|
||||||
|
|||||||
Reference in New Issue
Block a user