From 6609025d65853908156bd2262a5144e6d829a952 Mon Sep 17 00:00:00 2001 From: Shirofune-Security <43838376+Shirofune-Security@users.noreply.github.com> Date: Wed, 23 Sep 2026 07:37:17 +0900 Subject: [PATCH 1/2] docs: document native issue coverage --- CHANGELOG-Japanese.md | 2 ++ CHANGELOG.md | 2 ++ docs/eventlog-settings.md | 4 ++++ website/docs/resources/changelog.ja.md | 2 ++ website/docs/resources/changelog.md | 2 ++ 5 files changed, 12 insertions(+) diff --git a/CHANGELOG-Japanese.md b/CHANGELOG-Japanese.md index ebf3cb2e..03864696 100644 --- a/CHANGELOG-Japanese.md +++ b/CHANGELOG-Japanese.md @@ -2,6 +2,8 @@ ## 2.2.0 [2026/xx/xx] - Dev Release +- イベントログのサイズ、保持モード、復旧に関する保護範囲を文書化しました。 (#379) + - バージョン付きオフライン Intune 監査エクスポートと、割り当てに関する制限を文書化しました。 (#1) - 明示的な GPO エクスポート範囲と、ドメイン展開に関する制限を文書化しました。 (#2) diff --git a/CHANGELOG.md b/CHANGELOG.md index 4a273d1b..b6306b7d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,8 @@ ## 2.2.0 [2026/xx/xx] - Dev Release +- Document guarded event-log sizing, retention-mode, and recovery boundaries. (Related #379) + - Document the versioned offline Intune audit export and assignment limitations. (Related #1) - Document the explicit GPO export scope and its domain-deployment limitations. (Related #2) diff --git a/docs/eventlog-settings.md b/docs/eventlog-settings.md index 2b5dc129..a61a263d 100644 --- a/docs/eventlog-settings.md +++ b/docs/eventlog-settings.md @@ -1,5 +1,9 @@ # Event-log sizes and retention modes +### Issue 379 coverage + +Event-log sizing and retention changes are explicit per-channel controls with typed before/after evidence, mode preservation, and guarded recovery. Buffer size does not establish a retention duration, archive capacity, forwarding health, or absence of event loss. + `audit-filesize` and ordinary `configure` now use the same `config/eventlog_profiles.json` definitions. `-Profile` continues to select **advanced audit policy only**. Use the separate `-LogProfile` option with diff --git a/website/docs/resources/changelog.ja.md b/website/docs/resources/changelog.ja.md index d050f6c2..724b2bb1 100644 --- a/website/docs/resources/changelog.ja.md +++ b/website/docs/resources/changelog.ja.md @@ -5,6 +5,8 @@ ## 2.2.0 [2026/xx/xx] - Dev Release +- イベントログのサイズ、保持モード、復旧に関する保護範囲を文書化しました。 (#379) + - バージョン付きオフライン Intune 監査エクスポートと、割り当てに関する制限を文書化しました。 (#1) - 明示的な GPO エクスポート範囲と、ドメイン展開に関する制限を文書化しました。 (#2) diff --git a/website/docs/resources/changelog.md b/website/docs/resources/changelog.md index 3e39476a..1a0611e2 100644 --- a/website/docs/resources/changelog.md +++ b/website/docs/resources/changelog.md @@ -5,6 +5,8 @@ ## 2.2.0 [2026/xx/xx] - Dev Release +- Document guarded event-log sizing, retention-mode, and recovery boundaries. (Related #379) + - Document the versioned offline Intune audit export and assignment limitations. (Related #1) - Document the explicit GPO export scope and its domain-deployment limitations. (Related #2) From 5527649c3c4ab4f746cb971b63b09b3e41a7d2cc Mon Sep 17 00:00:00 2001 From: Shirofune-Security <43838376+Shirofune-Security@users.noreply.github.com> Date: Wed, 23 Sep 2026 08:58:15 +0900 Subject: [PATCH 2/2] docs: restore eventlog changelog entry --- CHANGELOG-Japanese.md | 2 ++ CHANGELOG.md | 2 ++ website/docs/resources/changelog.ja.md | 2 ++ website/docs/resources/changelog.md | 2 ++ 4 files changed, 8 insertions(+) diff --git a/CHANGELOG-Japanese.md b/CHANGELOG-Japanese.md index c6c9f2a9..3405c624 100644 --- a/CHANGELOG-Japanese.md +++ b/CHANGELOG-Japanese.md @@ -2,6 +2,8 @@ ## 2.2.0 [2026/xx/xx] - Dev Release +- イベントログのサイズ、保持モード、復旧に関する保護範囲を文書化しました。 (#379) + - ネイティブ Security 4703 帰属証跡と、条件付きマッピングの範囲を文書化しました。 (#380) - ネイティブ AppLocker 準備状態の確認と、安全な監査専用ポリシー取込の範囲を文書化しました。 (#381) diff --git a/CHANGELOG.md b/CHANGELOG.md index 29c6d2cd..79c701fa 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,8 @@ ## 2.2.0 [2026/xx/xx] - Dev Release +- Document guarded event-log sizing, retention-mode, and recovery boundaries. (Related #379) + - Document native Security 4703 attribution evidence and conditional mapping boundaries. (Related #380) - Document native AppLocker readiness checks and safe audit-only policy import boundaries. (Related #381) diff --git a/website/docs/resources/changelog.ja.md b/website/docs/resources/changelog.ja.md index 5dce36cc..997f9e97 100644 --- a/website/docs/resources/changelog.ja.md +++ b/website/docs/resources/changelog.ja.md @@ -5,6 +5,8 @@ ## 2.2.0 [2026/xx/xx] - Dev Release +- イベントログのサイズ、保持モード、復旧に関する保護範囲を文書化しました。 (#379) + - ネイティブ Security 4703 帰属証跡と、条件付きマッピングの範囲を文書化しました。 (#380) - ネイティブ AppLocker 準備状態の確認と、安全な監査専用ポリシー取込の範囲を文書化しました。 (#381) diff --git a/website/docs/resources/changelog.md b/website/docs/resources/changelog.md index 25d1139c..00f6799e 100644 --- a/website/docs/resources/changelog.md +++ b/website/docs/resources/changelog.md @@ -5,6 +5,8 @@ ## 2.2.0 [2026/xx/xx] - Dev Release +- Document guarded event-log sizing, retention-mode, and recovery boundaries. (Related #379) + - Document native Security 4703 attribution evidence and conditional mapping boundaries. (Related #380) - Document native AppLocker readiness checks and safe audit-only policy import boundaries. (Related #381)