CSEC_PUBLIC/WELA
1
0 Fork 0
mirror of https://github.com/Yamato-Security/WELA.git synced 2026-11-02 03:08:17 +01:00
Code Issues Packages Projects Releases Wiki Activity

docs: document native issue coverage

Browse Source
This commit is contained in:
Shirofune-Security committed 2026-09-23 07:37:25 +09:00
1 parent 94d69b0280
commit d5d7630cf2
5 files changed
+12
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

docs/smb-auditing.md
+4
View File
@@ -1,5 +1,9 @@
# Version-aware native SMB audit policies
### Issue 377 coverage
SMB audit switches are version-gated and configured independently from signing, encryption, guest access, and service state. Native readback and cleanup prove policy changes only; runtime traffic, emitted events, forwarding, and Sigma matching remain separate evidence.
The opt-in `smb-auditing` command audits, plans and configures six built-in Windows audit policies. It does not enable insecure guest access, weaken signing/encryption, change SMB dialects or shares, restart services, or install Sysmon. It does not configure event forwarding, change channel settings or claim a Sigma coverage increase.
Run in elevated **64-bit** Windows PowerShell 5.1 or PowerShell 7: