Commit Graph
1174 Commits
Author SHA1 Message Date
Shirofune-Security 4598bb36f7 Integrate current dev with intended-reader EVTX verification 2026-09-22 14:24:04 +09:00
田中ザック Isaac Mathis 015d56c92b Merge pull request #463 from Shirofune-Security/test/373-native-filesystem-sacl-lifecycle
test: validate public redirected filesystem SACL lifecycle
2026-09-22 14:21:46 +09:00
Shirofune-Security 656a20d620 Merge remote-tracking branch 'origin/dev' into test/373-native-filesystem-sacl-lifecycle 2026-09-22 12:16:22 +09:00
田中ザック Isaac Mathis 0ebe99b390 Merge pull request #462 from Shirofune-Security/feat/373-registry-sacl-recovery
feat: recover one proven registry-root audit ACE
2026-09-22 12:15:46 +09:00
田中ザック Isaac Mathis 857e6b0b06 Merge pull request #461 from Shirofune-Security/test/377-native-smb-policy
Verify public SMB audit policy configuration on native Windows
2026-09-22 12:15:40 +09:00
田中ザック Isaac Mathis 9720ad7886 Merge pull request #460 from Shirofune-Security/feat/362-scoped-outgoing-ntlm
Add scoped outgoing NTLM audit configuration
2026-09-22 12:03:49 +09:00
田中ザック Isaac Mathis 35ea5b87ef Merge pull request #459 from Shirofune-Security/fix/368-native-collector-observation
Fix native collector subscription inventory and Unicode evidence
2026-09-22 12:03:46 +09:00
Shirofune-Security 6feb0d8a33 test: complete filesystem lifecycle fixture dependencies and evidence guide 2026-09-22 11:59:29 +09:00
Shirofune-Security 8496b86b88 test: exercise public redirected filesystem SACL lifecycle and native4663 2026-09-22 11:54:37 +09:00
Shirofune-Security 0f95115908 test: establish owned redirected-profile native SACL fixture 2026-09-22 11:49:31 +09:00
Shirofune-Security 70a812556d Merge commit '29f03e352823af81b35869659928a94e70df4cf9' into feat/373-registry-sacl-recovery
# Conflicts:
#	.gitattributes
#	.github/workflows/release.yml
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-22 11:43:28 +09:00
Shirofune-Security 29f03e3528 Merge commit '559a9d1b8234f11642ba0ca4ea4a93b048bbd15f' into test/377-native-smb-policy
# Conflicts:
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-22 11:42:50 +09:00
Shirofune-Security 559a9d1b82 Merge commit '008a8c80b9820318be8d9f833c6adf31c2dbf9a9' into feat/362-scoped-outgoing-ntlm
# Conflicts:
#	.github/workflows/release.yml
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-22 11:42:30 +09:00
Shirofune-Security 008a8c80b9 Merge remote-tracking branch 'origin/dev' into fix/368-native-collector-observation
# Conflicts:
#	.github/workflows/release.yml
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-22 11:42:00 +09:00
田中ザック Isaac Mathis cd0f566b7e Merge pull request #458 from Shirofune-Security/test/386-native-provider-configure
Fix WinRM provider ID overflow and validate native pack configuration
2026-09-22 11:41:17 +09:00
Shirofune-Security 9f2dad6e20 test: retain native registry separators in isolated child scenario 2026-09-22 11:03:48 +09:00
Shirofune-Security 494f9c2f93 fix: accept exact native empty catalog representations and document recovery 2026-09-22 11:01:38 +09:00
Shirofune-Security 7a29bdc2b2 Merge remote-tracking branch 'origin/dev' into feat/373-registry-sacl-recovery 2026-09-22 10:57:17 +09:00
Shirofune-Security 314d25e6a2 fix: validate native empty catalogue and exercise registry recovery refusals 2026-09-22 10:57:17 +09:00
Shirofune-Security 8639bbd750 Pass literal named switches in negative public provider cases 2026-09-22 10:23:04 +09:00
Shirofune-Security 180ecaddbf Use explicit supported shells for native collector smoke 2026-09-22 10:22:44 +09:00
Shirofune-Security 43e5479fbc Retain independent cleanup snapshots and exercise native read-only smoke 2026-09-22 10:15:48 +09:00
Shirofune-Security 4d2a284a3c Merge remote-tracking branch 'origin/dev' into fix/368-native-collector-observation 2026-09-22 10:15:48 +09:00
Shirofune-Security a483ba3135 Merge remote-tracking branch 'origin/dev' into test/377-native-smb-policy 2026-09-22 10:15:39 +09:00
Shirofune-Security 36d8acf23e Merge remote-tracking branch 'origin/dev' into feat/362-scoped-outgoing-ntlm 2026-09-22 10:15:37 +09:00
Shirofune-Security c1971d8c04 Merge remote-tracking branch 'origin/dev' into test/386-native-provider-configure 2026-09-22 10:15:37 +09:00
Shirofune-Security d167ff39a4 Retain independent native XML for provider configuration evidence 2026-09-22 10:15:37 +09:00
田中ザック Isaac Mathis 1c38448c8c Merge pull request #457 from Shirofune-Security/test/378-native-security-warning
Verify Security log warning configuration on native Windows
2026-09-22 10:11:31 +09:00
田中ザック Isaac Mathis af28883f64 Merge pull request #456 from Shirofune-Security/test/373-native-registry-sacl-lifecycle
test: validate public registry SACL lifecycle on owned native hives
2026-09-22 10:11:25 +09:00
田中ザック Isaac Mathis 55df33e605 Merge pull request #455 from Shirofune-Security/feat/368-reviewed-wec-authorization
feat: add reviewed WEC source authorization updates
2026-09-22 10:11:18 +09:00
田中ザック Isaac Mathis c1e2d6fd97 Merge pull request #454 from Shirofune-Security/feat/367-reviewed-channel-recovery
Add reviewed recovery for completed native channel settings
2026-09-22 10:11:12 +09:00
Shirofune-Security 9caf23aff8 Verify actual SMB audit runtime observations separately from preserved security settings 2026-09-22 10:11:09 +09:00
Shirofune-Security 530b49f26b feat: checkpoint reviewed native registry SACL recovery 2026-09-22 10:11:02 +09:00
Shirofune-Security b61a3c6bca Handle native WinRM manifest IDs without Int32 overflow 2026-09-22 10:10:01 +09:00
Shirofune-Security 0777a5d0f8 Add scoped outgoing NTLM audit configuration with native acceptance 2026-09-22 10:09:37 +09:00
Shirofune-Security af88b87e01 Fix native collector subscription inventory and Unicode readback 2026-09-22 09:46:28 +09:00
Shirofune-Security f403521068 Merge commit '03039cb1c653f75cc0052ed93c7699290873058e' into test/386-native-provider-configure
# Conflicts:
#	.gitattributes
#	.github/workflows/release.yml
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-22 09:41:21 +09:00
Shirofune-Security 558ba6f2a8 Verify public SMB audit policy configuration on native Windows 2026-09-22 09:41:04 +09:00
Shirofune-Security 8af856ffa6 Validate public provider pack configuration on native Windows 2026-09-22 09:40:56 +09:00
Shirofune-Security 03039cb1c6 Merge commit 'ac45e8f72fead44765db26d4b543c60776e9fba0' into test/378-native-security-warning
# Conflicts:
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-22 09:35:07 +09:00
Shirofune-Security ac45e8f72f Merge commit 'dc7867b6bc1193e3b5d54a9c7368c0647c39b663' into test/373-native-registry-sacl-lifecycle
# Conflicts:
#	.gitattributes
#	.github/workflows/release.yml
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-22 09:35:07 +09:00
Shirofune-Security dc7867b6bc Merge commit 'ffe4ed473414438d5465156e15b62796393daf80' into feat/368-reviewed-wec-authorization
# Conflicts:
#	.gitattributes
#	.github/workflows/release.yml
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-22 09:35:07 +09:00
Shirofune-Security ffe4ed4734 Merge remote-tracking branch 'origin/dev' into feat/367-reviewed-channel-recovery 2026-09-22 09:33:52 +09:00
田中ザック Isaac Mathis d20b240611 Merge pull request #453 from Shirofune-Security/test/364-native-profile-configuration
Verify public audit-profile configuration on native Windows
2026-09-22 09:33:42 +09:00
Shirofune-Security 0d7bfd1317 test: consume valid review for native prerequisite refusal and harden cleanup 2026-09-22 08:17:10 +09:00
Shirofune-Security 59a83a20cc Fix WEC variant decoding and native authorization fixture 2026-09-22 08:08:17 +09:00
Shirofune-Security 79ee4da4dd Read registry descriptor from the owned native handle across both engines 2026-09-22 08:07:36 +09:00
Shirofune-Security 9238633041 test: run registry fixtures in explicit native shells and document evidence 2026-09-22 08:06:51 +09:00
Shirofune-Security 806e979ede Accept genuine native channel snapshot size and provider representation 2026-09-22 08:02:36 +09:00
Shirofune-Security 61f5fd1688 Merge remote-tracking branch 'origin/dev' into feat/368-reviewed-wec-authorization 2026-09-22 08:02:06 +09:00