 Shirofune-Security
|
3db5d73180
|
Merge latest dev before process command-line integration
|
2026-09-22 18:13:26 +09:00 |
|
|
Shirofune-Security
|
2b992f06e6
|
Integrate approved dev command and recovery additions
|
2026-09-22 15:07:20 +09:00 |
|
|
Shirofune-Security
|
bfa286bf7d
|
Integrate reviewed WMI recovery with combined dev auditing batch
|
2026-09-22 15:06:51 +09:00 |
|
|
Shirofune-Security
|
e584345df3
|
Integrate approved native recovery PRs before dev merge
|
2026-09-22 15:05:40 +09:00 |
|
|
Shirofune-Security
|
2b270042e7
|
Stack leaf-file recovery and preserve scoped NTLM dry-run integration
|
2026-09-22 15:03:17 +09:00 |
|
|
Shirofune-Security
|
3c47442634
|
Stack named registry recovery on reviewed logging integration
|
2026-09-22 15:01:03 +09:00 |
|
|
Shirofune-Security
|
16f9e69844
|
Stack native DNS probe on intended-reader recovery and approved dev
|
2026-09-22 14:59:41 +09:00 |
|
|
Shirofune-Security
|
1dfd3a92b9
|
Stack intended-reader EVTX recovery on the approved native auditing batch
|
2026-09-22 14:56:09 +09:00 |
|
|
Shirofune-Security
|
8aee77cfea
|
Bound unrelated command-line policy inventory
|
2026-09-22 14:46:25 +09:00 |
|
|
Shirofune-Security
|
ab45d03f15
|
Add reviewed removal of one proven parent-only WMI audit ACE
|
2026-09-22 14:43:33 +09:00 |
|
|
Shirofune-Security
|
aa4630dda9
|
Add scoped native 4688 command-line policy configuration
|
2026-09-22 14:34:05 +09:00 |
|
|
Shirofune-Security
|
b556b82ebc
|
Integrate native DNS probe with current dev commands and release guides
|
2026-09-22 14:25:44 +09:00 |
|
|
Shirofune-Security
|
3ba8a45d80
|
Integrate current native auditing commands with transcript verification
|
2026-09-22 14:24:29 +09:00 |
|
|
Shirofune-Security
|
0ef22f20fa
|
Merge dev and preserve leaf-file SACL recovery integration
|
2026-09-22 14:24:24 +09:00 |
|
|
Shirofune-Security
|
4598bb36f7
|
Integrate current dev with intended-reader EVTX verification
|
2026-09-22 14:24:04 +09:00 |
|
|
Shirofune-Security
|
397dfbf006
|
Merge dev and preserve named registry recovery integration
|
2026-09-22 14:23:55 +09:00 |
|
|
Shirofune-Security
|
005b249c3b
|
Integrate reviewed filesystem and WEF query changes with scoped NTLM auditing
|
2026-09-22 14:23:24 +09:00 |
|
|
Shirofune-Security
|
3fb0f8aa6c
|
fix: decode native WEF XML independently of property count
|
2026-09-22 12:37:37 +09:00 |
|
|
Shirofune-Security
|
c96ae4541c
|
test: retain precise native WEF XML boundary diagnostics
|
2026-09-22 12:33:44 +09:00 |
|
|
Shirofune-Security
|
9692edcec6
|
fix: normalize native WEF reader tokens before strict validation
|
2026-09-22 12:30:51 +09:00 |
|
|
Shirofune-Security
|
ad7ddf4de7
|
Handle native host casing and timestamp compatibility in query evidence
|
2026-09-22 12:14:05 +09:00 |
|
|
Shirofune-Security
|
f27238ebd5
|
Validate typed source inputs and preserve caller scope in query reader
|
2026-09-22 12:10:03 +09:00 |
|
|
Shirofune-Security
|
6f713e7497
|
fix: require running WMI before scoped NTLM observations
|
2026-09-22 12:06:11 +09:00 |
|
|
Shirofune-Security
|
b162c4e598
|
feat: configure selected incoming and domain NTLM audit policies
|
2026-09-22 12:03:11 +09:00 |
|
|
Shirofune-Security
|
54f9d6bf51
|
Add bounded native preflight for one selected WEF QueryList
|
2026-09-22 12:00:26 +09:00 |
|
|
Shirofune-Security
|
70a812556d
|
Merge commit '29f03e352823af81b35869659928a94e70df4cf9' into feat/373-registry-sacl-recovery
# Conflicts:
# .gitattributes
# .github/workflows/release.yml
# CHANGELOG-Japanese.md
# CHANGELOG.md
# website/docs/resources/changelog.ja.md
# website/docs/resources/changelog.md
|
2026-09-22 11:43:28 +09:00 |
|
|
Shirofune-Security
|
559a9d1b82
|
Merge commit '008a8c80b9820318be8d9f833c6adf31c2dbf9a9' into feat/362-scoped-outgoing-ntlm
# Conflicts:
# .github/workflows/release.yml
# CHANGELOG-Japanese.md
# CHANGELOG.md
# website/docs/resources/changelog.ja.md
# website/docs/resources/changelog.md
|
2026-09-22 11:42:30 +09:00 |
|
|
Shirofune-Security
|
008a8c80b9
|
Merge remote-tracking branch 'origin/dev' into fix/368-native-collector-observation
# Conflicts:
# .github/workflows/release.yml
# CHANGELOG-Japanese.md
# CHANGELOG.md
# website/docs/resources/changelog.ja.md
# website/docs/resources/changelog.md
|
2026-09-22 11:42:00 +09:00 |
|
|
Shirofune-Security
|
494f9c2f93
|
fix: accept exact native empty catalog representations and document recovery
|
2026-09-22 11:01:38 +09:00 |
|
|
Shirofune-Security
|
314d25e6a2
|
fix: validate native empty catalogue and exercise registry recovery refusals
|
2026-09-22 10:57:17 +09:00 |
|
|
Shirofune-Security
|
530b49f26b
|
feat: checkpoint reviewed native registry SACL recovery
|
2026-09-22 10:11:02 +09:00 |
|
|
Shirofune-Security
|
b61a3c6bca
|
Handle native WinRM manifest IDs without Int32 overflow
|
2026-09-22 10:10:01 +09:00 |
|
|
Shirofune-Security
|
0777a5d0f8
|
Add scoped outgoing NTLM audit configuration with native acceptance
|
2026-09-22 10:09:37 +09:00 |
|
|
Shirofune-Security
|
af88b87e01
|
Fix native collector subscription inventory and Unicode readback
|
2026-09-22 09:46:28 +09:00 |
|
|
Shirofune-Security
|
dc7867b6bc
|
Merge commit 'ffe4ed473414438d5465156e15b62796393daf80' into feat/368-reviewed-wec-authorization
# Conflicts:
# .gitattributes
# .github/workflows/release.yml
# CHANGELOG-Japanese.md
# CHANGELOG.md
# website/docs/resources/changelog.ja.md
# website/docs/resources/changelog.md
|
2026-09-22 09:35:07 +09:00 |
|
|
Shirofune-Security
|
59a83a20cc
|
Fix WEC variant decoding and native authorization fixture
|
2026-09-22 08:08:17 +09:00 |
|
|
Shirofune-Security
|
806e979ede
|
Accept genuine native channel snapshot size and provider representation
|
2026-09-22 08:02:36 +09:00 |
|
|
Shirofune-Security
|
ef2f07f0c6
|
Reject final-write drift in original or retained recovery evidence
|
2026-09-22 07:59:16 +09:00 |
|
|
Shirofune-Security
|
0ff81052e6
|
Merge commit '39e8ce1' into feat/367-reviewed-channel-recovery
# Conflicts:
# .gitattributes
# .github/workflows/release.yml
# CHANGELOG-Japanese.md
# CHANGELOG.md
# website/docs/resources/changelog.ja.md
# website/docs/resources/changelog.md
|
2026-09-22 07:53:01 +09:00 |
|
|
Shirofune-Security
|
0c51232a40
|
Add reviewed recovery of one completed native channel operation
|
2026-09-22 07:52:16 +09:00 |
|
|
Shirofune-Security
|
0051f8c662
|
Review and update only source SID authorization on disabled WEC subscriptions
|
2026-09-22 07:50:50 +09:00 |
|
|
Shirofune-Security
|
0d1adfb442
|
Integrate reviewed CLI, channel and native probe changes
|
2026-09-22 07:25:37 +09:00 |
|
|
Shirofune-Security
|
c89a21f81b
|
Integrate reviewed CLI, channels and AppLocker Script probe
|
2026-09-22 07:24:32 +09:00 |
|
|
Shirofune-Security
|
8bd7aa0c74
|
Verify effective native worker module path and complete fixture exit status
|
2026-09-21 23:07:16 +09:00 |
|
|
Shirofune-Security
|
2301bf1e85
|
Bind native listener adapter modules and normalize cross-engine context JSON
|
2026-09-21 23:03:17 +09:00 |
|
|
Shirofune-Security
|
3e9ba8c403
|
Create one reviewed exact-IP collector listener through a bounded native adapter
|
2026-09-21 22:58:08 +09:00 |
|
|
Shirofune-Security
|
d832b1e090
|
Measure held-readback phase and refuse implementation targets before hashing
|
2026-09-21 22:51:50 +09:00 |
|
|
Shirofune-Security
|
03bc63e996
|
Respect inherited execution policy for the fixed file worker
|
2026-09-21 22:43:07 +09:00 |
|
|
Shirofune-Security
|
ce7b49a5ac
|
Bind observed native file paths and document exact read evidence
|
2026-09-21 22:40:50 +09:00 |
|
|
Shirofune-Security
|
dc4360a886
|
Merge branch 'feat/375-firewall-log-recovery' into feat/373-native-file-access-probe
# Conflicts:
# WELA.ps1
|
2026-09-21 22:38:41 +09:00 |
|