mirror of
https://github.com/Yamato-Security/WELA.git
synced 2025-12-25 02:13:10 +01:00
26 lines
818 B
YAML
26 lines
818 B
YAML
name: Check audit setting
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
build:
|
|
strategy:
|
|
matrix:
|
|
os: [windows-2019, windows-2022, windows-2025]
|
|
runs-on: ${{ matrix.os }}
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: auditpol /list /subcategory:* /r
|
|
run: auditpol /list /subcategory:* /r
|
|
|
|
- name: auditpol /get /category:*
|
|
run: auditpol /get /category:*
|
|
|
|
- name: Get-WinEvent -ListLog * | Select-Object LogName, MaximumSizeInBytes
|
|
run: Get-WinEvent -ListLog * | Select-Object LogName, MaximumSizeInBytes
|
|
|
|
- name: Get-WinEvent -ListProvider *
|
|
run: (Get-WinEvent -ListProvider Microsoft-Windows-Security-Auditing).Events | ForEach-Object { [PSCustomObject]@{EventID=$_.Id; Description=($_.Description -replace "`r`n", " ") -replace "\..*", ""} }
|