CSEC_PUBLIC/WELA
1
0 Fork 0
mirror of https://github.com/Yamato-Security/WELA.git synced 2026-10-24 07:03:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'origin/dev' into feat/380-token-closure

Browse Source
This commit is contained in:
Shirofune-Security committed 2026-09-23 08:57:41 +09:00
2 parents f5f565097c ccd3f127d3
commit 74bbea3432
5 files changed
+8 -4
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CHANGELOG-Japanese.md
+1 -1
View File
@@ -2,7 +2,7 @@
## 2.2.0 [2026/xx/xx] - Dev Release
- ネイティブ Security 4703 帰属証跡と、条件付きマッピングの範囲を文書化しました。 (#380)
- ネイティブ AppLocker 準備状態の確認と、安全な監査専用ポリシー取込の範囲を文書化しました。 (#381)
- バージョン付きオフライン Intune 監査エクスポートと、割り当てに関する制限を文書化しました。 (#1)
CHANGELOG.md
+1 -1
View File
@@ -2,7 +2,7 @@
## 2.2.0 [2026/xx/xx] - Dev Release
- Document native Security 4703 attribution evidence and conditional mapping boundaries. (Related #380)
- Document native AppLocker readiness checks and safe audit-only policy import boundaries. (Related #381)
- Document the versioned offline Intune audit export and assignment limitations. (Related #1)
docs/applocker-readiness.md
+4
View File
@@ -1,5 +1,9 @@
# Native AppLocker readiness
### Issue 381 coverage
AppLocker readiness observes the effective policy, AppIDSvc, and native channels before any optional import. Only an operator-supplied audit-only policy may be imported; existing enforcement policies are preserved, and policy state is kept separate from event generation and Sigma eligibility.
`applocker-readiness` reports local and GP effective policy XML, each of the five rule collections, enforcement modes, rule counts, Application Identity (`AppIDSvc`) state/start mode and relevant AppLocker channel observations. A host with enabled channels but no rules reports `MissingGpPolicy`. Stopped/disabled services, missing channels, unavailable cmdlets and read errors remain explicit. `NotConfigured` with rules is treated as potential enforcement, never as disabled.
```powershell
website/docs/resources/changelog.ja.md
+1 -1
View File
@@ -5,7 +5,7 @@
## 2.2.0 [2026/xx/xx] - Dev Release
- ネイティブ Security 4703 帰属証跡と、条件付きマッピングの範囲を文書化しました。 (#380)
- ネイティブ AppLocker 準備状態の確認と、安全な監査専用ポリシー取込の範囲を文書化しました。 (#381)
- バージョン付きオフライン Intune 監査エクスポートと、割り当てに関する制限を文書化しました。 (#1)
website/docs/resources/changelog.md
+1 -1
View File
@@ -5,7 +5,7 @@
## 2.2.0 [2026/xx/xx] - Dev Release
- Document native Security 4703 attribution evidence and conditional mapping boundaries. (Related #380)
- Document native AppLocker readiness checks and safe audit-only policy import boundaries. (Related #381)
- Document the versioned offline Intune audit export and assignment limitations. (Related #1)