Guard WMI inheritance with bounded descendant observations

This commit is contained in:
Shirofune-Security committed 2026-09-22 14:33:54 +09:00
1 parent 7ef29df61f
commit ea184e5e95
6 files changed
+313 -5

No files matched your search

+2
View File
@@ -41,6 +41,8 @@ function Set-WelaWmiNamespaceDescriptor {
if ($script:dropUnknown) { $script:descriptor.SACL = @($script:descriptor.SACL | Where-Object AceType -ne 19) }
}
function Read-Host { param($Prompt) if ($script:promptCallback) { & $script:promptCallback }; if ($script:decline) { 'n' } else { 'Y' } }
function Get-WelaWmiChildNames {param($Namespace,$Maximum) @()}
function Get-WelaWmiDescendantContext {'Mock unchanged caller/host/source context'}
function New-TestContext([switch]$DryRun, [switch]$Prompt) {
$script:context = New-WelaConfigurationContext -Auto:(-not $Prompt) -DryRun:$DryRun -BackupPath (Join-Path $root ([guid]::NewGuid().ToString('N')))
return $script:context