CSEC_PUBLIC/WELA
1
0 Fork 0
mirror of https://github.com/Yamato-Security/WELA.git synced 2026-10-09 07:45:34 +02:00
Code Issues Packages Projects Releases Wiki Activity

Verify native EVTX recovery under the actual primary reader token

Browse Source
This commit is contained in:
Shirofune-Security committed 2026-09-21 09:30:59 +09:00
1 parent fd7a7924aa
commit 2631331406
11 files changed
+224 -31
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

.gitattributes
+5
View File
@@ -58,3 +58,8 @@ tests/SelectedSaclFixtureProtection.cs text eol=lf
/scripts/WmiNamespaceAuditing.ps1 text eol=lf
/scripts/WefArrival.ps1 text eol=lf
/tests/WmiProbe*.ps1 text eol=lf
# Actual archive-reader evidence binds implementation and native-token source bytes.
/scripts/EvtxRecovery.ps1 text eol=lf
/scripts/NativeValidation.ps1 text eol=lf
/tests/EvtxRecovery*.ps1 text eol=lf
/tests/fixtures/EvtxReader*.ps1 text eol=lf