CSEC_PUBLIC/WELA
1
0 Fork 0
mirror of https://github.com/Yamato-Security/WELA.git synced 2026-11-15 09:24:11 +01:00
Code Issues Packages Projects Releases Wiki Activity
1,356 Commits 15 Branches 3 Tags
dev
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Shirofune-SecurityandClaude Opus 5.5 2bcf316316 Allow process-commandline Configure -DryRun through the global guard 
process-commandline (#471) forwards -DryRun to Invoke-WelaProcessCommandline
and its CLI test expects `-ProcessCommandlineAction Configure -DryRun` to be
accepted, but the command was never added to the global -DryRun allow-list,
so the guard refused it before dispatch. The process-commandline workflow has
failed on dev since #471 merged. Plan/Audit with -DryRun remain refused by the
command's dedicated guard.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
 2026-09-23 12:39:30 +09:00
Shirofune-Security b3de1d0211 release: mark 3.0.0 as dev release 2026-09-23 09:07:08 +09:00
田中ザック Isaac Mathis 4c8b4cd890 Merge pull request #488 from Shirofune-Security/feat/300-version-banner 
release: bump WELA to 3.0.0
 2026-09-23 09:04:01 +09:00
Shirofune-Security 0fc386bd3c release: bump WELA to 3.0.0 and show banner version 2026-09-23 09:03:51 +09:00
田中ザック Isaac Mathis d59ebe38fa Merge pull request #487 from Shirofune-Security/feat/377-smb-closure 
docs: close SMB audit policy gap (#377)
 2026-09-23 08:59:03 +09:00
Shirofune-Security 65e84d9521 docs: restore SMB changelog entry 2026-09-23 08:58:58 +09:00
Shirofune-Security 3a5481ea9b Merge remote-tracking branch 'origin/dev' into feat/377-smb-closure 2026-09-23 08:58:47 +09:00
田中ザック Isaac Mathis 2b32c8c47d Merge pull request #486 from Shirofune-Security/feat/378-onesettings-closure 
docs: close OneSettings warning gap (#378)
 2026-09-23 08:58:42 +09:00
Shirofune-Security d23d99ceef docs: restore onesettings changelog entry 2026-09-23 08:58:37 +09:00
Shirofune-Security 23aed4bd09 Merge remote-tracking branch 'origin/dev' into feat/378-onesettings-closure 2026-09-23 08:58:25 +09:00
田中ザック Isaac Mathis 58d637050e Merge pull request #485 from Shirofune-Security/feat/379-eventlog-closure 
docs: close event-log retention gap (#379)
 2026-09-23 08:58:20 +09:00
Shirofune-Security 5527649c3c docs: restore eventlog changelog entry 2026-09-23 08:58:15 +09:00
Shirofune-Security 56d61435f9 Merge remote-tracking branch 'origin/dev' into feat/379-eventlog-closure 2026-09-23 08:58:04 +09:00
田中ザック Isaac Mathis d896b219a0 Merge pull request #484 from Shirofune-Security/feat/380-token-closure 
docs: close token-right attribution gap (#380)
 2026-09-23 08:57:58 +09:00
Shirofune-Security 896cc5a249 docs: restore token changelog entry 2026-09-23 08:57:52 +09:00
Shirofune-Security 74bbea3432 Merge remote-tracking branch 'origin/dev' into feat/380-token-closure 2026-09-23 08:57:41 +09:00
田中ザック Isaac Mathis ccd3f127d3 Merge pull request #483 from Shirofune-Security/feat/381-applocker-closure 
docs: close AppLocker readiness gap (#381)
 2026-09-23 08:57:27 +09:00
Shirofune-Security d5d7630cf2 docs: document native issue coverage 2026-09-23 07:37:25 +09:00
Shirofune-Security 4927a1a120 docs: document native issue coverage 2026-09-23 07:37:21 +09:00
Shirofune-Security 6609025d65 docs: document native issue coverage 2026-09-23 07:37:17 +09:00
Shirofune-Security f5f565097c docs: document native issue coverage 2026-09-23 07:37:13 +09:00
Shirofune-Security dbabb8eada docs: document native issue coverage 2026-09-23 07:37:09 +09:00
田中ザック Isaac Mathis 94d69b0280 Merge pull request #482 from Shirofune-Security/feat/1-intune-closure 
docs: close Intune support gap (#1)
 2026-09-23 07:35:57 +09:00
Shirofune-Security 335e6bb29c docs: restore Intune changelog entry 2026-09-23 07:35:52 +09:00
Shirofune-Security db46798b9b Merge remote-tracking branch 'origin/dev' into feat/1-intune-closure 2026-09-23 07:35:41 +09:00
田中ザック Isaac Mathis f6bb1b794b Merge pull request #481 from Shirofune-Security/feat/2-gpo-closure 
docs: close GPO support gap (#2)
 2026-09-23 07:35:36 +09:00
Shirofune-Security 7e93606b72 docs: restore GPO changelog entry 2026-09-23 07:35:31 +09:00
Shirofune-Security 0a4d96f838 Merge remote-tracking branch 'origin/dev' into feat/2-gpo-closure 2026-09-23 07:35:15 +09:00
田中ザック Isaac Mathis b337eb05de Merge pull request #480 from Shirofune-Security/feat/10-scoring-closure 
docs: close audit scoring gap (#10)
 2026-09-23 07:35:11 +09:00
Shirofune-Security 69ea640f42 docs: restore scoring changelog entry 2026-09-23 07:35:05 +09:00
Shirofune-Security 6ed7b4e3d4 Merge remote-tracking branch 'origin/dev' into feat/10-scoring-closure 2026-09-23 07:34:53 +09:00
田中ザック Isaac Mathis 812c04b078 Merge pull request #479 from Shirofune-Security/feat/185-custom-profile-closure 
docs: close custom audit profile gap (#185)
 2026-09-23 07:34:48 +09:00
Shirofune-Security 16e913423d docs: restore custom profile changelog entry 2026-09-23 07:34:42 +09:00
Shirofune-Security 8e8d2a616c Merge remote-tracking branch 'origin/dev' into feat/185-custom-profile-closure 2026-09-23 07:34:27 +09:00
田中ザック Isaac Mathis e09eeaa3a4 Merge pull request #478 from Shirofune-Security/feat/387-sigma-closure 
docs: close native Sigma eligibility gap (#387)
 2026-09-23 07:34:13 +09:00
Shirofune-Security f3338612a3 docs: fix issue coverage heading 2026-09-23 07:05:59 +09:00
Shirofune-Security 9cf5afe62b docs: fix issue coverage heading 2026-09-23 07:05:57 +09:00
Shirofune-Security d9f864c013 docs: fix issue coverage heading 2026-09-23 07:05:56 +09:00
Shirofune-Security 042970a895 docs: fix issue coverage heading 2026-09-23 07:05:54 +09:00
Shirofune-Security 03f553e169 docs: fix issue coverage heading 2026-09-23 07:05:51 +09:00
Shirofune-Security 209306fbd3 docs: document issue coverage 2026-09-23 06:49:10 +09:00
Shirofune-Security 0b8627bbc0 docs: document issue coverage 2026-09-23 06:49:05 +09:00
Shirofune-Security 61f57715f0 docs: document issue coverage 2026-09-23 06:49:00 +09:00
Shirofune-Security 8a1e4e2d87 docs: document issue coverage 2026-09-23 06:48:56 +09:00
Shirofune-Security f4cc10cbba docs: document issue coverage 2026-09-23 06:48:50 +09:00
田中ザック Isaac Mathis e5cb8f4e5d Merge pull request #477 from Shirofune-Security/feat/386-provider-packs-closure 
docs: close optional provider-pack gap (#386)
 2026-09-23 06:47:20 +09:00
Shirofune-Security 2373923e21 docs: restore provider-pack changelog entry 2026-09-23 06:47:14 +09:00
Shirofune-Security 8f08039a8f Merge remote-tracking branch 'origin/dev' into feat/386-provider-packs-closure 2026-09-23 06:47:04 +09:00
田中ザック Isaac Mathis e03d5f0cf0 Merge pull request #476 from Shirofune-Security/feat/385-applicability-closure 
docs: close applicability and build-gating gap (#385)
 2026-09-23 06:46:59 +09:00
Shirofune-Security 4410b3a59e docs: restore applicability changelog entry 2026-09-23 06:46:47 +09:00
Shirofune-Security adaa7d3552 Merge remote-tracking branch 'origin/dev' into feat/385-applicability-closure 2026-09-23 06:46:37 +09:00
田中ザック Isaac Mathis d03a4e78ce Merge pull request #475 from Shirofune-Security/feat/384-audit-integrity-closure 
docs: close audit-integrity rights gap (#384)
 2026-09-23 06:46:32 +09:00
Shirofune-Security e66878bdd8 docs: restore audit-integrity changelog entry 2026-09-23 06:46:22 +09:00
Shirofune-Security e6e4c0e692 Merge remote-tracking branch 'origin/dev' into feat/384-audit-integrity-closure 2026-09-23 06:46:12 +09:00
田中ザック Isaac Mathis a9bacc30d1 Merge pull request #474 from Shirofune-Security/feat/383-ldap-closure 
docs: close LDAP diagnostics gap (#383)
 2026-09-23 06:46:05 +09:00
Shirofune-Security 1da7ea5cb2 docs: restore changelog entries after dev sync 2026-09-23 06:45:58 +09:00
Shirofune-Security 4195fa1297 docs: restore changelog entries after dev sync 2026-09-23 06:45:56 +09:00
Shirofune-Security 230e687e49 docs: restore changelog entries after dev sync 2026-09-23 06:45:54 +09:00
Shirofune-Security e04537f06f docs: restore changelog entries after dev sync 2026-09-23 06:45:52 +09:00
Shirofune-Security 1bbfd928f4 Merge remote-tracking branch 'origin/dev' into feat/386-provider-packs-closure 2026-09-23 06:45:19 +09:00
Shirofune-Security ecc8163b55 Merge remote-tracking branch 'origin/dev' into feat/385-applicability-closure 2026-09-23 06:45:19 +09:00
Shirofune-Security ea5ff7bc7b Merge remote-tracking branch 'origin/dev' into feat/384-audit-integrity-closure 2026-09-23 06:45:19 +09:00
Shirofune-Security 0588916b6f Merge remote-tracking branch 'origin/dev' into feat/383-ldap-closure 2026-09-23 06:45:19 +09:00
田中ザック Isaac Mathis ca6bc2bf33 Merge pull request #473 from Shirofune-Security/feat/382-retention-closure 
docs: close retention and forwarding health gap (#382)
 2026-09-23 06:44:58 +09:00
Shirofune-Security 099530df0a docs: sync translated changelog snapshots 2026-09-23 06:44:18 +09:00
Shirofune-Security efded3c641 docs: sync translated changelog snapshots 2026-09-23 06:44:16 +09:00
Shirofune-Security afd1acda5e docs: sync translated changelog snapshots 2026-09-23 06:44:14 +09:00
Shirofune-Security 51f2b05b91 docs: sync translated changelog snapshots 2026-09-23 06:44:12 +09:00
Shirofune-Security f211f55f49 docs: sync translated changelog snapshots 2026-09-23 06:44:10 +09:00
Shirofune-Security 1183be332b docs: close issue providers 2026-09-22 18:20:25 +09:00
Shirofune-Security 552592cbac docs: close issue applicability 2026-09-22 18:20:23 +09:00
Shirofune-Security d1e0e845cb docs: close issue integrity 2026-09-22 18:20:21 +09:00
Shirofune-Security 80a12ca36f docs: close issue ldap 2026-09-22 18:20:19 +09:00
Shirofune-Security fd9275b1ca docs: close issue retention 2026-09-22 18:20:17 +09:00
田中ザック Isaac Mathis 76af0e92d8 Merge pull request #472 from Shirofune-Security/feat/373-native-registry-value-probe 
Validate native registry value auditing with a fixed owned probe
 2026-09-22 18:16:46 +09:00
Shirofune-Security f180ca72ae Merge latest dev before registry probe merge 2026-09-22 18:16:38 +09:00
田中ザック Isaac Mathis 50448ae19a Merge pull request #471 from Shirofune-Security/feat/364-scoped-process-commandline 
Add scoped process command-line audit policy configuration
 2026-09-22 18:16:10 +09:00
Shirofune-Security 92f2be18de Merge latest dev before process command-line merge 2026-09-22 18:15:57 +09:00
田中ザック Isaac Mathis 91932c74c7 Merge pull request #470 from Shirofune-Security/feat/376-scoped-powershell-logging 
Add scoped Windows PowerShell module and script-block logging
 2026-09-22 18:14:38 +09:00
Shirofune-Security d20be8ff51 Merge latest dev before registry probe merge 2026-09-22 18:14:25 +09:00
Shirofune-Security f73c96e44c Merge latest dev before process command-line merge 2026-09-22 18:14:15 +09:00
Shirofune-Security c56a6f14d6 Merge latest dev before PowerShell logging merge 2026-09-22 18:14:07 +09:00
田中ザック Isaac Mathis 4af844bea2 Merge pull request #469 from Shirofune-Security/feat/372-reviewed-wmi-descendants 
Guard explicit WMI inheritance with reviewed descendant evidence
 2026-09-22 18:13:51 +09:00
Shirofune-Security 3db5d73180 Merge latest dev before process command-line integration 2026-09-22 18:13:26 +09:00
Shirofune-Security dee12fa965 Merge latest dev before PowerShell logging integration 2026-09-22 18:13:17 +09:00
Shirofune-Security 7966529cc5 Merge latest dev before WMI descendants integration 2026-09-22 18:13:07 +09:00
Shirofune-Security ea8b4f152c Merge latest dev before registry probe integration 2026-09-22 18:12:57 +09:00
田中ザック Isaac Mathis 46b88daa3c Merge pull request #468 from Shirofune-Security/feat/372-reviewed-wmi-recovery 
Recover one proven parent-only WMI namespace audit ACE
 2026-09-22 18:12:25 +09:00
Shirofune-Security 53d9eddb86 Preserve literal registry types when projecting logging capacity 2026-09-22 15:44:16 +09:00
Shirofune-Security 32cfb460a2 Accept native UInt16 CIM domain roles in registry probe preflight 2026-09-22 15:32:00 +09:00
Shirofune-Security fb0a424da8 Reject scoped logging changes that overflow bounded policy inventories 2026-09-22 15:19:20 +09:00
田中ザック Isaac Mathis 4eabfe329c Merge pull request #436 from Shirofune-Security/feat/376-current-token-transcript 
Verify current-account automatic PowerShell transcripts
 2026-09-22 15:14:12 +09:00
田中ザック Isaac Mathis bbedaab966 Merge pull request #437 from Shirofune-Security/feat/373-file-sacl-recovery 
Add guarded recovery of one selected leaf-file audit ACE
 2026-09-22 15:14:06 +09:00
田中ザック Isaac Mathis fcb57f1887 Merge pull request #435 from Shirofune-Security/feat/365-named-registry-recovery 
Recover named logging DWORDs from completed configuration journals
 2026-09-22 15:14:00 +09:00
田中ザック Isaac Mathis 9bc98d4439 Merge pull request #434 from Shirofune-Security/feat/386-native-dns-client-probe 
Add fixed native DNS Client event3008 probe
 2026-09-22 15:13:54 +09:00
田中ザック Isaac Mathis e9dc90e39a Merge pull request #433 from Shirofune-Security/feat/382-native-evtx-reader 
Verify exact EVTX recovery under the intended reader token
 2026-09-22 15:11:59 +09:00
田中ザック Isaac Mathis e93ea3e7ea Merge pull request #467 from Shirofune-Security/feat/380-native-token-right-probe 
Verify native Security4703 audit attribution on Windows Server
 2026-09-22 15:11:28 +09:00
田中ザック Isaac Mathis a4c17bb814 Merge pull request #466 from Shirofune-Security/test/378-native-onesettings-configure 
Fix notification defaults and verify OneSettings configuration on Windows
 2026-09-22 15:11:24 +09:00
田中ザック Isaac Mathis 65831b747b Merge pull request #465 from Shirofune-Security/feat/363-scoped-ntlm-auditing 
Add scoped incoming and domain NTLM audit configuration
 2026-09-22 15:09:31 +09:00
Shirofune-Security 66162232b6 Integrate reviewed logging and recovery base for WMI tree safeguards 2026-09-22 15:08:52 +09:00