 Shirofune-Security
|
f180ca72ae
|
Merge latest dev before registry probe merge
|
2026-09-22 18:16:38 +09:00 |
|
|
Shirofune-Security
|
92f2be18de
|
Merge latest dev before process command-line merge
|
2026-09-22 18:15:57 +09:00 |
|
|
Shirofune-Security
|
d20be8ff51
|
Merge latest dev before registry probe merge
|
2026-09-22 18:14:25 +09:00 |
|
|
Shirofune-Security
|
f73c96e44c
|
Merge latest dev before process command-line merge
|
2026-09-22 18:14:15 +09:00 |
|
|
Shirofune-Security
|
c56a6f14d6
|
Merge latest dev before PowerShell logging merge
|
2026-09-22 18:14:07 +09:00 |
|
|
Shirofune-Security
|
3db5d73180
|
Merge latest dev before process command-line integration
|
2026-09-22 18:13:26 +09:00 |
|
|
Shirofune-Security
|
dee12fa965
|
Merge latest dev before PowerShell logging integration
|
2026-09-22 18:13:17 +09:00 |
|
|
Shirofune-Security
|
7966529cc5
|
Merge latest dev before WMI descendants integration
|
2026-09-22 18:13:07 +09:00 |
|
|
Shirofune-Security
|
ea8b4f152c
|
Merge latest dev before registry probe integration
|
2026-09-22 18:12:57 +09:00 |
|
|
Shirofune-Security
|
66162232b6
|
Integrate reviewed logging and recovery base for WMI tree safeguards
|
2026-09-22 15:08:52 +09:00 |
|
|
Shirofune-Security
|
81c01330b8
|
Merge final reviewed dev sources and preserve literal CLI arguments
|
2026-09-22 15:08:26 +09:00 |
|
|
Shirofune-Security
|
7e1b076254
|
Integrate approved dev command and recovery additions
|
2026-09-22 15:07:44 +09:00 |
|
|
Shirofune-Security
|
2b992f06e6
|
Integrate approved dev command and recovery additions
|
2026-09-22 15:07:20 +09:00 |
|
|
Shirofune-Security
|
bfa286bf7d
|
Integrate reviewed WMI recovery with combined dev auditing batch
|
2026-09-22 15:06:51 +09:00 |
|
|
Shirofune-Security
|
e584345df3
|
Integrate approved native recovery PRs before dev merge
|
2026-09-22 15:05:40 +09:00 |
|
|
Shirofune-Security
|
2b270042e7
|
Stack leaf-file recovery and preserve scoped NTLM dry-run integration
|
2026-09-22 15:03:17 +09:00 |
|
|
Shirofune-Security
|
3c47442634
|
Stack named registry recovery on reviewed logging integration
|
2026-09-22 15:01:03 +09:00 |
|
|
Shirofune-Security
|
16f9e69844
|
Stack native DNS probe on intended-reader recovery and approved dev
|
2026-09-22 14:59:41 +09:00 |
|
|
Shirofune-Security
|
1dfd3a92b9
|
Stack intended-reader EVTX recovery on the approved native auditing batch
|
2026-09-22 14:56:09 +09:00 |
|
|
Shirofune-Security
|
9575c8204d
|
Add fixed current-user registry value audit probe
|
2026-09-22 14:55:12 +09:00 |
|
|
Shirofune-Security
|
8546d319eb
|
Reject unexplained descendant changes and unrelated WMI command arguments
|
2026-09-22 14:45:06 +09:00 |
|
|
Shirofune-Security
|
e419b073fe
|
Document scoped PowerShell controls and align native evidence boundaries
|
2026-09-22 14:43:40 +09:00 |
|
|
Shirofune-Security
|
ab45d03f15
|
Add reviewed removal of one proven parent-only WMI audit ACE
|
2026-09-22 14:43:33 +09:00 |
|
|
Shirofune-Security
|
ddcdd8e2b8
|
Document bounded WMI tree guarantees and record native protection behavior
|
2026-09-22 14:40:25 +09:00 |
|
|
Shirofune-Security
|
3f613ea19c
|
Add scoped Windows PowerShell logging policy and native validation
|
2026-09-22 14:37:38 +09:00 |
|
|
Shirofune-Security
|
036f51886a
|
Exercise descendant drift and use supported workflow shell dispatch
|
2026-09-22 14:36:48 +09:00 |
|
|
Shirofune-Security
|
aa4630dda9
|
Add scoped native 4688 command-line policy configuration
|
2026-09-22 14:34:05 +09:00 |
|
|
Shirofune-Security
|
ea184e5e95
|
Guard WMI inheritance with bounded descendant observations
|
2026-09-22 14:33:54 +09:00 |
|
|
Shirofune-Security
|
b556b82ebc
|
Integrate native DNS probe with current dev commands and release guides
|
2026-09-22 14:25:44 +09:00 |
|
|
Shirofune-Security
|
3ba8a45d80
|
Integrate current native auditing commands with transcript verification
|
2026-09-22 14:24:29 +09:00 |
|
|
Shirofune-Security
|
0ef22f20fa
|
Merge dev and preserve leaf-file SACL recovery integration
|
2026-09-22 14:24:24 +09:00 |
|
|
Shirofune-Security
|
4598bb36f7
|
Integrate current dev with intended-reader EVTX verification
|
2026-09-22 14:24:04 +09:00 |
|
|
Shirofune-Security
|
397dfbf006
|
Merge dev and preserve named registry recovery integration
|
2026-09-22 14:23:55 +09:00 |
|
|
Shirofune-Security
|
7ef29df61f
|
Integrate reviewed native auditing batch and preserve 4703 validation
|
2026-09-22 14:23:44 +09:00 |
|
|
Shirofune-Security
|
2fef35da23
|
Integrate reviewed native auditing commands with OneSettings validation
|
2026-09-22 14:23:33 +09:00 |
|
|
Shirofune-Security
|
005b249c3b
|
Integrate reviewed filesystem and WEF query changes with scoped NTLM auditing
|
2026-09-22 14:23:24 +09:00 |
|
|
Shirofune-Security
|
34b7a775c4
|
Merge dev and preserve filesystem lifecycle and WEF query changes
|
2026-09-22 14:23:10 +09:00 |
|
|
Shirofune-Security
|
160b573a99
|
test: bind native 4703 attribution to installed schema and exact restored context
|
2026-09-22 12:34:43 +09:00 |
|
|
Shirofune-Security
|
f27238ebd5
|
Validate typed source inputs and preserve caller scope in query reader
|
2026-09-22 12:10:03 +09:00 |
|
|
Shirofune-Security
|
353159615e
|
fix: preserve omitted notification selection and document native OneSettings acceptance
|
2026-09-22 12:06:07 +09:00 |
|
|
Shirofune-Security
|
f87ce48206
|
test: exercise public OneSettings policy and Privacy channel configuration
|
2026-09-22 12:03:18 +09:00 |
|
|
Shirofune-Security
|
b162c4e598
|
feat: configure selected incoming and domain NTLM audit policies
|
2026-09-22 12:03:11 +09:00 |
|
|
Shirofune-Security
|
54f9d6bf51
|
Add bounded native preflight for one selected WEF QueryList
|
2026-09-22 12:00:26 +09:00 |
|
|
Shirofune-Security
|
6feb0d8a33
|
test: complete filesystem lifecycle fixture dependencies and evidence guide
|
2026-09-22 11:59:29 +09:00 |
|
|
Shirofune-Security
|
cd65133fc4
|
test: verify fixed native token privilege adjustment feasibility
|
2026-09-22 11:51:31 +09:00 |
|
|
Shirofune-Security
|
0f95115908
|
test: establish owned redirected-profile native SACL fixture
|
2026-09-22 11:49:31 +09:00 |
|
|
Shirofune-Security
|
70a812556d
|
Merge commit '29f03e352823af81b35869659928a94e70df4cf9' into feat/373-registry-sacl-recovery
# Conflicts:
# .gitattributes
# .github/workflows/release.yml
# CHANGELOG-Japanese.md
# CHANGELOG.md
# website/docs/resources/changelog.ja.md
# website/docs/resources/changelog.md
|
2026-09-22 11:43:28 +09:00 |
|
|
Shirofune-Security
|
29f03e3528
|
Merge commit '559a9d1b8234f11642ba0ca4ea4a93b048bbd15f' into test/377-native-smb-policy
# Conflicts:
# CHANGELOG-Japanese.md
# CHANGELOG.md
# website/docs/resources/changelog.ja.md
# website/docs/resources/changelog.md
|
2026-09-22 11:42:50 +09:00 |
|
|
Shirofune-Security
|
559a9d1b82
|
Merge commit '008a8c80b9820318be8d9f833c6adf31c2dbf9a9' into feat/362-scoped-outgoing-ntlm
# Conflicts:
# .github/workflows/release.yml
# CHANGELOG-Japanese.md
# CHANGELOG.md
# website/docs/resources/changelog.ja.md
# website/docs/resources/changelog.md
|
2026-09-22 11:42:30 +09:00 |
|
|
Shirofune-Security
|
008a8c80b9
|
Merge remote-tracking branch 'origin/dev' into fix/368-native-collector-observation
# Conflicts:
# .github/workflows/release.yml
# CHANGELOG-Japanese.md
# CHANGELOG.md
# website/docs/resources/changelog.ja.md
# website/docs/resources/changelog.md
|
2026-09-22 11:42:00 +09:00 |
|