Added CA name to Auditing Issue for clarity

TrimarcJake · Dec 9, 2023 · f9d9a38 · f9d9a38 · SamErde · Dec 9, 2023
1 parent 092c74f
commit f9d9a38
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Private/Find-AuditingIssue.ps1 b/Private/Find-AuditingIssue.ps1
@@ -19,7 +19,7 @@
             $Issue | Add-Member -MemberType NoteProperty -Name 'Technique' -Value 'DETECT' -Force
         }
         else {
-            $Issue | Add-Member -MemberType NoteProperty -Name 'Issue' -Value "Auditing is not fully enabled. Current value is $($_.AuditFilter)" -Force
+            $Issue | Add-Member -MemberType NoteProperty -Name 'Issue' -Value "Auditing is not fully enabled on $($_.CAFullName). Current value is $($_.AuditFilter)" -Force
             $Issue | Add-Member -MemberType NoteProperty -Name 'Fix' `
                 -Value "certutil.exe -config `'$($_.CAFullname)`' -setreg `'CA\AuditFilter`' 127; Invoke-Command -ComputerName `'$($_.dNSHostName)`' -ScriptBlock { Get-Service -Name `'certsvc`' | Restart-Service -Force }" -Force
             $Issue | Add-Member -MemberType NoteProperty -Name 'Revert' `