From d5d7630cf2c56e3d8d37ebc9626b2a284b557997 Mon Sep 17 00:00:00 2001 From: Shirofune-Security <43838376+Shirofune-Security@users.noreply.github.com> Date: Wed, 23 Sep 2026 07:37:25 +0900 Subject: [PATCH 1/2] docs: document native issue coverage --- CHANGELOG-Japanese.md | 2 ++ CHANGELOG.md | 2 ++ docs/smb-auditing.md | 4 ++++ website/docs/resources/changelog.ja.md | 2 ++ website/docs/resources/changelog.md | 2 ++ 5 files changed, 12 insertions(+) diff --git a/CHANGELOG-Japanese.md b/CHANGELOG-Japanese.md index ebf3cb2e..b77a0ac6 100644 --- a/CHANGELOG-Japanese.md +++ b/CHANGELOG-Japanese.md @@ -2,6 +2,8 @@ ## 2.2.0 [2026/xx/xx] - Dev Release +- バージョン対応 SMB 監査ポリシーの範囲とランタイム上の制限を文書化しました。 (#377) + - バージョン付きオフライン Intune 監査エクスポートと、割り当てに関する制限を文書化しました。 (#1) - 明示的な GPO エクスポート範囲と、ドメイン展開に関する制限を文書化しました。 (#2) diff --git a/CHANGELOG.md b/CHANGELOG.md index 4a273d1b..03d288cc 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,8 @@ ## 2.2.0 [2026/xx/xx] - Dev Release +- Document version-aware SMB audit policy scope and runtime limitations. (Related #377) + - Document the versioned offline Intune audit export and assignment limitations. (Related #1) - Document the explicit GPO export scope and its domain-deployment limitations. (Related #2) diff --git a/docs/smb-auditing.md b/docs/smb-auditing.md index dc726dca..d30768ce 100644 --- a/docs/smb-auditing.md +++ b/docs/smb-auditing.md @@ -1,5 +1,9 @@ # Version-aware native SMB audit policies +### Issue 377 coverage + +SMB audit switches are version-gated and configured independently from signing, encryption, guest access, and service state. Native readback and cleanup prove policy changes only; runtime traffic, emitted events, forwarding, and Sigma matching remain separate evidence. + The opt-in `smb-auditing` command audits, plans and configures six built-in Windows audit policies. It does not enable insecure guest access, weaken signing/encryption, change SMB dialects or shares, restart services, or install Sysmon. It does not configure event forwarding, change channel settings or claim a Sigma coverage increase. Run in elevated **64-bit** Windows PowerShell 5.1 or PowerShell 7: diff --git a/website/docs/resources/changelog.ja.md b/website/docs/resources/changelog.ja.md index d050f6c2..ec6f9602 100644 --- a/website/docs/resources/changelog.ja.md +++ b/website/docs/resources/changelog.ja.md @@ -5,6 +5,8 @@ ## 2.2.0 [2026/xx/xx] - Dev Release +- バージョン対応 SMB 監査ポリシーの範囲とランタイム上の制限を文書化しました。 (#377) + - バージョン付きオフライン Intune 監査エクスポートと、割り当てに関する制限を文書化しました。 (#1) - 明示的な GPO エクスポート範囲と、ドメイン展開に関する制限を文書化しました。 (#2) diff --git a/website/docs/resources/changelog.md b/website/docs/resources/changelog.md index 3e39476a..ca796c1f 100644 --- a/website/docs/resources/changelog.md +++ b/website/docs/resources/changelog.md @@ -5,6 +5,8 @@ ## 2.2.0 [2026/xx/xx] - Dev Release +- Document version-aware SMB audit policy scope and runtime limitations. (Related #377) + - Document the versioned offline Intune audit export and assignment limitations. (Related #1) - Document the explicit GPO export scope and its domain-deployment limitations. (Related #2) From 65e84d952131ab6523b6f3d9d687270ab639731f Mon Sep 17 00:00:00 2001 From: Shirofune-Security <43838376+Shirofune-Security@users.noreply.github.com> Date: Wed, 23 Sep 2026 08:58:58 +0900 Subject: [PATCH 2/2] docs: restore SMB changelog entry --- CHANGELOG-Japanese.md | 2 ++ CHANGELOG.md | 2 ++ website/docs/resources/changelog.ja.md | 2 ++ website/docs/resources/changelog.md | 2 ++ 4 files changed, 8 insertions(+) diff --git a/CHANGELOG-Japanese.md b/CHANGELOG-Japanese.md index 9c16a16f..19ee2308 100644 --- a/CHANGELOG-Japanese.md +++ b/CHANGELOG-Japanese.md @@ -2,6 +2,8 @@ ## 2.2.0 [2026/xx/xx] - Dev Release +- バージョン対応 SMB 監査ポリシーの範囲とランタイム上の制限を文書化しました。 (#377) + - バージョン対応 OneSettings と Security 警告設定の範囲を文書化しました。 (#378) - イベントログのサイズ、保持モード、復旧に関する保護範囲を文書化しました。 (#379) diff --git a/CHANGELOG.md b/CHANGELOG.md index 6385a912..9cf0b7c9 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,8 @@ ## 2.2.0 [2026/xx/xx] - Dev Release +- Document version-aware SMB audit policy scope and runtime limitations. (Related #377) + - Document version-aware OneSettings and Security warning configuration boundaries. (Related #378) - Document guarded event-log sizing, retention-mode, and recovery boundaries. (Related #379) diff --git a/website/docs/resources/changelog.ja.md b/website/docs/resources/changelog.ja.md index fe364091..2be0d423 100644 --- a/website/docs/resources/changelog.ja.md +++ b/website/docs/resources/changelog.ja.md @@ -5,6 +5,8 @@ ## 2.2.0 [2026/xx/xx] - Dev Release +- バージョン対応 SMB 監査ポリシーの範囲とランタイム上の制限を文書化しました。 (#377) + - バージョン対応 OneSettings と Security 警告設定の範囲を文書化しました。 (#378) - イベントログのサイズ、保持モード、復旧に関する保護範囲を文書化しました。 (#379) diff --git a/website/docs/resources/changelog.md b/website/docs/resources/changelog.md index c7a2fe98..ed610048 100644 --- a/website/docs/resources/changelog.md +++ b/website/docs/resources/changelog.md @@ -5,6 +5,8 @@ ## 2.2.0 [2026/xx/xx] - Dev Release +- Document version-aware SMB audit policy scope and runtime limitations. (Related #377) + - Document version-aware OneSettings and Security warning configuration boundaries. (Related #378) - Document guarded event-log sizing, retention-mode, and recovery boundaries. (Related #379)