Atliso-SecurityLogGuard

When the Security event log is set to Do Not Overwrite (LogMode=Retain) and fills up, Windows can flip CrashOnAuditFail to 2, which locks out every non-administrator until the log is cleared. This script catches the condition early and remediates it: it resizes the log, sets it to overwrite as needed, and - if the lockout has already tripped - arch... More info