mirror of
https://github.com/Yamato-Security/WELA.git
synced 2026-07-05 08:28:33 +02:00
Shirofune-Security
8799bffbea
Add machine-translated content for Traditional Chinese (zh-TW), Korean, German, Turkish, French, Spanish, Brazilian Portuguese (pt-BR), Ukrainian, Hindi, Indonesian, Burmese, Thai and Arabic. Japanese keeps its official translation. Only prose is translated; code, commands, paths, links and anchors preserved. Translated navigation labels added to mkdocs.yml for every language. Builds clean with mkdocs --strict (15 languages). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
56 lines
2.4 KiB
Markdown
56 lines
2.4 KiB
Markdown
# Penggunaan Perintah
|
|
## audit-settings
|
|
Perintah `audit-settings` memeriksa pengaturan kebijakan audit log peristiwa Windows dan membandingkannya dengan pengaturan yang direkomendasikan dari [Yamato Security](https://github.com/Yamato-Security/EnableWindowsLogSettings), [Microsoft(Sever/Client)](https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/audit-policy-recommendations), dan [Australian Signals Directorate (ASD)](https://www.cyber.gov.au/resources-business-and-government/maintaining-devices-and-systems/system-hardening-and-administration/system-monitoring/windows-event-logging-and-forwarding).
|
|
`RuleCount` menunjukkan jumlah [aturan Sigma](https://github.com/SigmaHQ/sigma) yang dapat mendeteksi peristiwa dalam kategori tersebut.
|
|
|
|
### Contoh perintah `audit-settings`
|
|
Periksa dengan pengaturan rekomendasi default Yamato Security dan simpan hasilnya ke CSV:
|
|
```
|
|
./WELA.ps1 audit-settings -Baseline YamatoSecurity
|
|
```
|
|
|
|
Periksa dengan pengaturan rekomendasi Australian Signals Directorate dan simpan hasilnya ke CSV:
|
|
```
|
|
./WELA.ps1 audit-settings -Baseline ASD
|
|
```
|
|
|
|
Periksa dengan pengaturan rekomendasi Server OS dari Microsoft dan tampilkan hasilnya dalam GUI:
|
|
```
|
|
./WELA.ps1 audit-settings -Baseline Microsoft_Server -OutType gui
|
|
```
|
|
|
|
Periksa dengan pengaturan rekomendasi Client OS dari Microsoft dan tampilkan hasilnya dalam format tabel:
|
|
```
|
|
./WELA.ps1 audit-settings -Baseline Microsoft_Client -OutType table
|
|
```
|
|
|
|
## audit-filesize
|
|
Perintah `audit-filesize` memeriksa ukuran file log peristiwa Windows dan membandingkannya dengan pengaturan yang direkomendasikan dari rekomendasi Yamato Security.
|
|
|
|
### Contoh perintah `audit-filesize`
|
|
Periksa ukuran file log peristiwa Windows dengan rekomendasi Yamato Security dan simpan hasilnya ke CSV:
|
|
```
|
|
./WELA.ps1 audit-filesize -Baseline YamatoSecurity
|
|
```
|
|
|
|
## configure
|
|
Perintah `configure` menetapkan kebijakan audit log peristiwa Windows dan ukuran file yang direkomendasikan.
|
|
|
|
#### Contoh perintah `configure`
|
|
Terapkan pengaturan rekomendasi Yamato Security (dengan prompt konfirmasi sebelum mengubah pengaturan):
|
|
```
|
|
./WELA.ps1 configure -Baseline YamatoSecurity
|
|
```
|
|
|
|
Terapkan pengaturan rekomendasi Australian Signals Directorate tanpa prompt konfirmasi:
|
|
```
|
|
./WELA.ps1 configure -Baseline ASD -auto
|
|
```
|
|
|
|
## update-rules
|
|
#### Contoh perintah `update-rules`
|
|
Perbarui file konfigurasi aturan Sigma WELA:
|
|
```
|
|
./WELA.ps1 update-rules
|
|
```
|