From 514415098d5eb646375edebcf05efc2f20a5ab1c Mon Sep 17 00:00:00 2001
From: PaulHigin <paulhi@microsoft.com>
Date: Tue, 28 Mar 2023 15:15:41 -0700
Subject: [PATCH] Update WDAC audit event channel

---
 .../PowerShell.Core.Instrumentation.man                         | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/PowerShell.Core.Instrumentation/PowerShell.Core.Instrumentation.man b/src/PowerShell.Core.Instrumentation/PowerShell.Core.Instrumentation.man
index 86de837..8019539 100644
--- a/src/PowerShell.Core.Instrumentation/PowerShell.Core.Instrumentation.man
+++ b/src/PowerShell.Core.Instrumentation/PowerShell.Core.Instrumentation.man
@@ -2209,7 +2209,7 @@
                 version="1"
               />
           <event
-                channel="C_OPERATIONAL"
+                channel="C_ANALYTIC"
                 keywords="WDACAudit"
                 level="win:Verbose"
                 message = "$(string.PS_PROVIDER.event.E_A_WDACAudit.message)"