CSEC_PUBLIC/WELA
1
0 Fork 0
mirror of https://github.com/Yamato-Security/WELA.git synced 2026-10-08 15:25:24 +02:00
Code Issues Packages Projects Releases Wiki Activity
1,079 Commits 12 Branches 3 Tags
3e9ba8c4038806af6618ca62d858f9ecdc4ec084
Commit Graph
1079 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Shirofune-Security 3e9ba8c403 Create one reviewed exact-IP collector listener through a bounded native adapter 2026-09-21 22:58:08 +09:00
Shirofune-Security ee254e6c54 Merge remote-tracking branch 'origin/dev' into feat/368-reviewed-wec-listener 2026-09-21 22:57:53 +09:00
Shirofune-Security 4905f82eb5 Add reviewed WEC listener CLI contract and operator guide 2026-09-21 22:40:05 +09:00
Shirofune-Security 506333c501 Use a fixed native Windows PowerShell 5.1 listener adapter 2026-09-21 22:36:15 +09:00
田中ザック Isaac Mathis 7d4d582852 Merge pull request #447 from Shirofune-Security/feat/375-firewall-log-recovery 
Add guarded single-profile firewall logging recovery
 2026-09-21 22:35:10 +09:00
田中ザック Isaac Mathis fa1190e12c Merge pull request #446 from Shirofune-Security/feat/386-native-capi2-probe 
Measure a fixed offline native CAPI2 certificate-chain event
 2026-09-21 22:34:41 +09:00
田中ザック Isaac Mathis 0ae8c00443 Merge pull request #443 from Shirofune-Security/feat/376-transcription-recovery 
Add reviewed native transcription policy recovery
 2026-09-21 22:30:25 +09:00
Shirofune-Security c1aaa693ac Pass explicit held listener XML through the typed native cmdlet 2026-09-21 22:30:13 +09:00
Shirofune-Security 4f653c5185 Record merged dev ancestry without changing the reviewed tree 2026-09-21 22:28:49 +09:00
Shirofune-Security 25fa7200a0 Checkpoint native local WSMan create with fixed listener XML 2026-09-21 22:27:05 +09:00
Shirofune-Security 72c2d14046 Merge branch 'feat/375-firewall-log-recovery' into feat/368-reviewed-wec-listener 2026-09-21 22:24:50 +09:00
田中ザック Isaac Mathis 7bfd8f65a6 Add reviewed event-log size and retention recovery (#445) 
* Add reviewed recovery of completed event-log size and retention changes

* Select 64-bit size comparison on Windows PowerShell 5.1

* Require typed completion and identity fields in recovery evidence

* Preserve supported UTC timestamp parsing in recovery history

* Bind the reviewed native host gate and context dependency

* Refuse unknown recovery options before native restoration
 2026-09-21 22:24:21 +09:00
Shirofune-Security 8fed328442 Integrate the reviewed recovery and native probe batch 2026-09-21 22:23:25 +09:00
Shirofune-Security b018135e73 Use canonical WSMan listener resource URI across PowerShell engines 2026-09-21 22:22:50 +09:00
Shirofune-Security 2f442af4da Integrate reviewed recovery and failed-logon commands 2026-09-21 22:21:35 +09:00
Shirofune-Security c4e9e765ff Integrate reviewed event-log recovery and failed-logon changes 2026-09-21 22:20:02 +09:00
Shirofune-Security 504e36c15e Checkpoint exact-IP WinRM listener creation on native Windows 2026-09-21 22:14:53 +09:00
Shirofune-Security 89f520511b Merge dev after failed-logon probe integration 2026-09-21 22:13:52 +09:00
田中ザック Isaac Mathis 6d228fedef Add a native local failed-logon audit probe (#444) 
* Add native local nonexistent-account failed-logon probe

* Match actual MSV1 local authentication event package

* Refuse coerced identity and authentication receipt fields

* Preserve explicit UTC DateTime receipts on older PowerShell7

* Reject unknown failed-logon probe options before dispatch
 2026-09-21 22:13:20 +09:00
Shirofune-Security ab69ce3c4b Explain disabled transcription after interrupted recovery 2026-09-21 22:09:06 +09:00
Shirofune-Security 2d208f457a Refuse unknown recovery options before native restoration 2026-09-21 18:24:06 +09:00
Shirofune-Security dc1e354475 Reject unbound preview and positional probe arguments 2026-09-21 18:23:54 +09:00
Shirofune-Security 6980657337 Reject unbound recovery options before command dispatch 2026-09-21 18:23:53 +09:00
Shirofune-Security 6bf4360362 Merge final dev and verify strict transcription recovery CLI 2026-09-21 18:22:31 +09:00
Shirofune-Security 9bc243a041 Integrate final reviewed development base for CAPI2 probe 2026-09-21 18:21:10 +09:00
Shirofune-Security e61056caba Merge final dev and preserve recovery and ingress command handlers 2026-09-21 18:21:06 +09:00
Shirofune-Security 3abe3018ba Merge branch 'dev' of https://github.com/Yamato-Security/WELA into feat/375-firewall-log-recovery 
# Conflicts:
#	.github/workflows/release.yml
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
 2026-09-21 18:20:57 +09:00
Shirofune-Security 22d3a13180 Reject coerced transcription recovery history discriminators 2026-09-21 18:19:57 +09:00
田中ザック Isaac Mathis 203fdfc942 Add reviewed scoped collector firewall ingress creation (#442) 
* Add reviewed scoped collector firewall ingress creation

* Avoid Windows Clear-Item alias in native ingress fixture

* Handle native nullable package scope and retain bounded filter evidence

* Match native firewall network spelling in collector prerequisites
 2026-09-21 18:19:30 +09:00
Shirofune-Security fa720f1454 Bind the reviewed native host gate and context dependency 2026-09-21 18:17:23 +09:00
Shirofune-Security 6c6edc7a68 Preserve supported UTC timestamp parsing in recovery history 2026-09-21 18:15:45 +09:00
Shirofune-Security e4e60684ac Verify stopped providers are refused before connecting 2026-09-21 18:15:30 +09:00
Shirofune-Security 83ab9c8752 Require running firewall providers before recovery observations 2026-09-21 18:15:02 +09:00
Shirofune-Security 3ee0d7b6bd Require typed completion and identity fields in recovery evidence 2026-09-21 18:14:13 +09:00
Shirofune-Security e068bd8f52 Merge dev and preserve independent recovery and WEC commands 2026-09-21 18:11:29 +09:00
Shirofune-Security dd950c7358 Reject boolean coercion in completed recovery evidence 2026-09-21 18:11:21 +09:00
Shirofune-Security ec21453cf2 Bind strict receipt parser into CAPI2 source evidence 2026-09-21 18:11:13 +09:00
Shirofune-Security 07e3d37265 Merge branch 'dev' of https://github.com/Yamato-Security/WELA into feat/375-firewall-log-recovery 
# Conflicts:
#	.github/workflows/release.yml
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
 2026-09-21 18:09:42 +09:00
田中ザック Isaac Mathis 9d03a19082 Activate native SMB audit runtime switches explicitly (#441) 
* Add explicit native SMB runtime audit activation

* Select explicit PowerShell workflow shells and link PR changelog

* Clear expected refusal child exit codes after assertions

* Retain native SMB command provenance in capability diagnostics

* Bind SMB command guards to observed native CDXML module identities
 2026-09-21 18:09:10 +09:00
Shirofune-Security 6f779a7dd4 Require exact generated certificate DER bytes 2026-09-21 18:06:27 +09:00
Shirofune-Security d590e8226a Merge branch 'dev' of https://github.com/Yamato-Security/WELA into feat/375-firewall-log-recovery 
# Conflicts:
#	.github/workflows/release.yml
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
 2026-09-21 18:04:28 +09:00
Shirofune-Security 1572d2b128 Pin observed CAPI2 XML and require existing running services 2026-09-21 18:03:42 +09:00
Shirofune-Security e8b018d5c9 Refuse ambiguous Windows path aliases during recovery 2026-09-21 17:56:45 +09:00
Shirofune-Security a5f674e3f8 Sign public certificate without copying its ephemeral private key 2026-09-21 17:56:04 +09:00
Shirofune-Security 43683b7aa3 Link guarded recovery from firewall configuration guide 2026-09-21 17:55:50 +09:00
Shirofune-Security 8c6a597425 Cover CIS recovery paths and bound retained native evidence 2026-09-21 17:55:25 +09:00
田中ザック Isaac Mathis b4fb77da02 Review and apply existing WEC subscription enable/disable (#440) 
* Add reviewed existing WEC subscription state transitions

* Validate WEC destination and retain failed activation state
 2026-09-21 17:54:55 +09:00
Shirofune-Security 2e329c7f2f Preserve policy arrays through Windows PowerShell JSON roundtrips 2026-09-21 17:54:51 +09:00
Shirofune-Security 7184918f66 Create an unnamed CNG key through typed native helper 2026-09-21 17:53:39 +09:00
Shirofune-Security afc748188d Merge branch 'dev' of https://github.com/Yamato-Security/WELA into feat/375-firewall-log-recovery 
# Conflicts:
#	.github/workflows/release.yml
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
 2026-09-21 17:52:42 +09:00