CSEC_PUBLIC/WELA
1
0 Fork 0
mirror of https://github.com/Yamato-Security/WELA.git synced 2026-10-08 07:15:25 +02:00
Code Issues Packages Projects Releases Wiki Activity

Use precise native UTC for WMI probe event intervals (#438)

Browse Source
This commit is contained in:
田中ザック Isaac Mathis authored and GitHub committed 2026-09-21 17:30:16 +09:00
1 parent fd7a7924aa
commit 7cd2eb9dbf
11 files changed
+69 -25
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

scripts/WmiProbeNative.cs
+2
View File
@@ -12,6 +12,8 @@ namespace Wela.WmiProbe {
public Group[] Groups; public Privilege[] Privileges;
}
public static class Native {
[DllImport("kernel32.dll",ExactSpelling=true)] static extern void GetSystemTimePreciseAsFileTime(out long value);
public static DateTime UtcNow() {long value;GetSystemTimePreciseAsFileTime(out value);return DateTime.FromFileTimeUtc(value);}
[StructLayout(LayoutKind.Sequential)] struct Luid {public uint Low; public int High;}
[StructLayout(LayoutKind.Sequential)] struct Statistics {public Luid TokenId,AuthenticationId;public long Expiration;public int Type,Level;public uint Charged,Available,Groups,Privileges;public Luid Modified;}
[StructLayout(LayoutKind.Sequential)] struct SidAndAttributes {public IntPtr Sid;public uint Attributes;}