Commit Graph
1174 Commits
Author SHA1 Message Date
Shirofune-Security e57701b22f Merge remote-tracking branch 'origin/dev' into test/373-native-registry-sacl-lifecycle 2026-09-22 08:01:48 +09:00
Shirofune-Security a62c3b7def test: exercise public registry SACL lifecycle and native4657 2026-09-22 08:01:48 +09:00
Shirofune-Security 07acf9c1c2 Merge remote-tracking branch 'origin/dev' into feat/367-reviewed-channel-recovery 2026-09-22 08:01:06 +09:00
Shirofune-Security 6bbfa8b65e Use owned registry handles in Windows warning acceptance fixture 2026-09-22 08:00:53 +09:00
Shirofune-Security 197306b523 Preserve independent cleanup attempts and record actual native host context 2026-09-22 08:00:52 +09:00
田中ザック Isaac Mathis c223d536cc Merge pull request #452 from Shirofune-Security/feat/368-reviewed-wec-listener
Add reviewed exact-IP WEC listener creation
2026-09-22 07:59:54 +09:00
田中ザック Isaac Mathis 1c0ac4b470 Merge pull request #451 from Shirofune-Security/feat/373-native-file-access-probe
Add an explicit one-byte file access probe with native 4663 evidence
2026-09-22 07:59:47 +09:00
田中ザック Isaac Mathis c0e70b5728 Merge pull request #450 from Shirofune-Security/feat/381-native-applocker-script-probe
Add native AppLocker Script event proof
2026-09-22 07:59:40 +09:00
田中ザック Isaac Mathis fd24c4948a Merge pull request #448 from Shirofune-Security/fix/365-reject-unbound-cli-arguments
Reject unknown CLI options before configuration runs
2026-09-22 07:59:34 +09:00
Shirofune-Security ef2f07f0c6 Reject final-write drift in original or retained recovery evidence 2026-09-22 07:59:16 +09:00
Shirofune-Security 0ff81052e6 Merge commit '39e8ce1' into feat/367-reviewed-channel-recovery
# Conflicts:
#	.gitattributes
#	.github/workflows/release.yml
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-22 07:53:01 +09:00
Shirofune-Security 0c51232a40 Add reviewed recovery of one completed native channel operation 2026-09-22 07:52:16 +09:00
Shirofune-Security 0051f8c662 Review and update only source SID authorization on disabled WEC subscriptions 2026-09-22 07:50:50 +09:00
Shirofune-Security b92c044dd9 Verify public Security warning policy configuration on native Windows 2026-09-22 07:50:09 +09:00
Shirofune-Security 9a4a3fca95 Exercise public profile configuration against native audit policy 2026-09-22 07:41:18 +09:00
Shirofune-Security 99cd1ea492 Merge commit '39e8ce1' into test/373-native-registry-sacl-lifecycle 2026-09-22 07:29:23 +09:00
Shirofune-Security 021ebecc62 Checkpoint an owned mounted hive through the public SACL catalog 2026-09-22 07:29:23 +09:00
Shirofune-Security 39e8ce1d70 Resolve combined native source line-ending attributes 2026-09-22 07:25:54 +09:00
Shirofune-Security 0d1adfb442 Integrate reviewed CLI, channel and native probe changes 2026-09-22 07:25:37 +09:00
Shirofune-Security c89a21f81b Integrate reviewed CLI, channels and AppLocker Script probe 2026-09-22 07:24:32 +09:00
Shirofune-Security f3bd83a521 Integrate reviewed CLI and native channel configuration changes 2026-09-22 07:23:48 +09:00
Shirofune-Security 6365402f16 Clarify unsupported common parameters and integrate native channel tests 2026-09-22 07:21:55 +09:00
田中ザック Isaac Mathis 52e09638ad Merge pull request #449 from Shirofune-Security/test/367-native-channel-configuration
Add native acceptance tests for channel-settings
2026-09-22 07:21:08 +09:00
Shirofune-Security 8bd7aa0c74 Verify effective native worker module path and complete fixture exit status 2026-09-21 23:07:16 +09:00
Shirofune-Security 2301bf1e85 Bind native listener adapter modules and normalize cross-engine context JSON 2026-09-21 23:03:17 +09:00
Shirofune-Security 3e9ba8c403 Create one reviewed exact-IP collector listener through a bounded native adapter 2026-09-21 22:58:08 +09:00
Shirofune-Security ee254e6c54 Merge remote-tracking branch 'origin/dev' into feat/368-reviewed-wec-listener 2026-09-21 22:57:53 +09:00
Shirofune-Security d832b1e090 Measure held-readback phase and refuse implementation targets before hashing 2026-09-21 22:51:50 +09:00
Shirofune-Security 03bc63e996 Respect inherited execution policy for the fixed file worker 2026-09-21 22:43:07 +09:00
Shirofune-Security ce7b49a5ac Bind observed native file paths and document exact read evidence 2026-09-21 22:40:50 +09:00
Shirofune-Security 4905f82eb5 Add reviewed WEC listener CLI contract and operator guide 2026-09-21 22:40:05 +09:00
Shirofune-Security dc4360a886 Merge branch 'feat/375-firewall-log-recovery' into feat/373-native-file-access-probe
# Conflicts:
#	WELA.ps1
2026-09-21 22:38:41 +09:00
Shirofune-Security eb1b9989a1 Load the service enum for isolated Windows PowerShell fixtures 2026-09-21 22:38:22 +09:00
Shirofune-Security 506333c501 Use a fixed native Windows PowerShell 5.1 listener adapter 2026-09-21 22:36:15 +09:00
田中ザック Isaac Mathis 7d4d582852 Merge pull request #447 from Shirofune-Security/feat/375-firewall-log-recovery
Add guarded single-profile firewall logging recovery
2026-09-21 22:35:10 +09:00
田中ザック Isaac Mathis fa1190e12c Merge pull request #446 from Shirofune-Security/feat/386-native-capi2-probe
Measure a fixed offline native CAPI2 certificate-chain event
2026-09-21 22:34:41 +09:00
Shirofune-Security 37e93e10eb Refuse stopped service dependencies before AppLocker CIM observation 2026-09-21 22:34:09 +09:00
田中ザック Isaac Mathis 0ae8c00443 Merge pull request #443 from Shirofune-Security/feat/376-transcription-recovery
Add reviewed native transcription policy recovery
2026-09-21 22:30:25 +09:00
Shirofune-Security c1aaa693ac Pass explicit held listener XML through the typed native cmdlet 2026-09-21 22:30:13 +09:00
Shirofune-Security bfbdc6c476 Read the owned release pipe with encoding-preamble detection 2026-09-21 22:29:03 +09:00
Shirofune-Security 4f653c5185 Record merged dev ancestry without changing the reviewed tree 2026-09-21 22:28:49 +09:00
Shirofune-Security 019f13b566 Merge branch 'feat/375-firewall-log-recovery' into feat/381-native-applocker-script-probe
# Conflicts:
#	.github/workflows/release.yml
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-21 22:27:49 +09:00
Shirofune-Security a61181e860 Checkpoint exact native one-byte file access probe 2026-09-21 22:27:26 +09:00
Shirofune-Security 25fa7200a0 Checkpoint native local WSMan create with fixed listener XML 2026-09-21 22:27:05 +09:00
Shirofune-Security ef64b08bd2 Document Script evidence boundaries and retain bounded startup diagnostics 2026-09-21 22:26:34 +09:00
Shirofune-Security 29bdc908c5 Integrate the reviewed native recovery and probe batch 2026-09-21 22:26:32 +09:00
Shirofune-Security f05f852286 Retain native channel preservation evidence and document acceptance limits 2026-09-21 22:26:15 +09:00
Shirofune-Security d0973a832d Integrate reviewed native probes and recovery commands 2026-09-21 22:25:37 +09:00
Shirofune-Security 3919ba5d4a Document supported CLI preview options 2026-09-21 22:25:02 +09:00
Shirofune-Security 72c2d14046 Merge branch 'feat/375-firewall-log-recovery' into feat/368-reviewed-wec-listener 2026-09-21 22:24:50 +09:00