CSEC_PUBLIC/WELA
1
0
Fork 0
mirror of https://github.com/Yamato-Security/WELA.git synced 2026-09-30 03:27:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Stack named registry recovery on reviewed logging integration

Browse Source
This commit is contained in:
Shirofune-Security
2026-09-22 15:01:03 +09:00
parent 397dfbf006 16f9e69844
commit 3c47442634
53 changed files with 2655 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitattributes
+15
View File
@@ -58,6 +58,11 @@ tests/SelectedSaclFixtureProtection.cs text eol=lf
/scripts/WmiNamespaceAuditing.ps1 text eol=lf
/scripts/WefArrival.ps1 text eol=lf
/tests/WmiProbe*.ps1 text eol=lf
# Actual archive-reader evidence binds implementation and native-token source bytes.
/scripts/EvtxRecovery.ps1 text eol=lf
/scripts/NativeValidation.ps1 text eol=lf
/tests/EvtxRecovery*.ps1 text eol=lf
/tests/fixtures/EvtxReader*.ps1 text eol=lf
# Named registry recovery binds implementation bytes across checkouts.
/scripts/NamedRegistryRecovery* text eol=lf
@@ -101,6 +106,16 @@ tests/NativeProviderConfigure.Windows.Tests.ps1 text eol=lf
/tests/WecCollectorObservation* text eol=lf
/tests/WecSubscriptionInventory* text eol=lf
/tests/TokenRightAttribution*.ps1 text eol=lf
/tests/TokenRightAttribution*.cs text eol=lf
# Disposable public OneSettings fixture source identity.
/tests/OneSettingsConfigure*.ps1 text eol=lf
# Scoped NTLM source and native evidence retain stable bytes.
/scripts/NtlmAudit.ps1 text eol=lf
/tests/NtlmAudit* text eol=lf
# Native query receipts bind the same source bytes on every supported engine.
/scripts/WefQuery* text eol=lf
/tests/WefQuery* text eol=lf
# Public filesystem-SACL disposable lifecycle evidence.
tests/FileSaclProfileFixture.cs text eol=lf
tests/FileSaclLifecycle.Windows.Tests.ps1 text eol=lf