CSEC_PUBLIC/WELA
1
0 Fork 0
mirror of https://github.com/Yamato-Security/WELA.git synced 2026-10-08 07:15:25 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #479 from Shirofune-Security/feat/185-custom-profile-closure

Browse Source 
docs: close custom audit profile gap (#185)
This commit is contained in:
田中ザック Isaac Mathis authored and GitHub committed 2026-09-23 07:34:48 +09:00
2 parents e09eeaa3a4 16e913423d
commit 812c04b078
5 files changed
+11
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CHANGELOG-Japanese.md
+2
View File
@@ -2,6 +2,8 @@
## 2.2.0 [2026/xx/xx] - Dev Release
- バージョン付きカスタム監査プロファイルの読込、意味、変更検知を文書化しました。 (#185)
- ネイティブ限定 Sigma 適格性の再現可能な状態と、VM・証跡の境界を文書化しました。 (#387)
- ネイティブプロバイダーパックのスキーマ固定、役割・ビルド制約、手動レビューへのフォールバック、チャネル設定と検出適格性の分離を文書化しました。 (#386)
CHANGELOG.md
+2
View File
@@ -2,6 +2,8 @@
## 2.2.0 [2026/xx/xx] - Dev Release
- Document versioned custom audit-profile loading, semantics, and drift protection. (Related #185)
- Document reproducible native-only Sigma eligibility states and explicit VM/evidence boundaries. (Related #387)
- Document opt-in native provider-pack schema pinning, role/build gating, manual-review fallbacks, and the separation between configured channels and detection eligibility. (Related #386)
docs/custom-audit-profiles.md
+3
View File
@@ -121,3 +121,6 @@ These are hosted standalone servers classified by the shared profile engine as
MemberServer; no domain join or GPO refresh is simulated. Configuration and
benign event/backend acceptance on Windows 11, domain-joined servers, DC and AD CS labs remain separate;
no clean-install or detection-coverage claim is made.
### Issue 185 coverage
Custom audit settings are loaded from a versioned JSON profile instead of requiring script edits. Exact, minimum, preserve, optional, and not-configured semantics are validated before configuration, with profile hashes guarding against drift.
website/docs/resources/changelog.ja.md
+2
View File
@@ -5,6 +5,8 @@
## 2.2.0 [2026/xx/xx] - Dev Release
- バージョン付きカスタム監査プロファイルの読込、意味、変更検知を文書化しました。 (#185)
- ネイティブ限定 Sigma 適格性の再現可能な状態と、VM・証跡の境界を文書化しました。 (#387)
- ネイティブプロバイダーパックのスキーマ固定、役割・ビルド制約、手動レビューへのフォールバック、チャネル設定と検出適格性の分離を文書化しました。 (#386)
website/docs/resources/changelog.md
+2
View File
@@ -5,6 +5,8 @@
## 2.2.0 [2026/xx/xx] - Dev Release
- Document versioned custom audit-profile loading, semantics, and drift protection. (Related #185)
- Document reproducible native-only Sigma eligibility states and explicit VM/evidence boundaries. (Related #387)
- Document opt-in native provider-pack schema pinning, role/build gating, manual-review fallbacks, and the separation between configured channels and detection eligibility. (Related #386)