Commit Graph
283 Commits
Author SHA1 Message Date
Shirofune-Security 66162232b6 Integrate reviewed logging and recovery base for WMI tree safeguards 2026-09-22 15:08:52 +09:00
Shirofune-Security e584345df3 Integrate approved native recovery PRs before dev merge 2026-09-22 15:05:40 +09:00
Shirofune-Security 2b270042e7 Stack leaf-file recovery and preserve scoped NTLM dry-run integration 2026-09-22 15:03:17 +09:00
Shirofune-Security 3c47442634 Stack named registry recovery on reviewed logging integration 2026-09-22 15:01:03 +09:00
Shirofune-Security 16f9e69844 Stack native DNS probe on intended-reader recovery and approved dev 2026-09-22 14:59:41 +09:00
Shirofune-Security d5de556f74 Retain partial WMI tree observations after a parent write 2026-09-22 14:58:07 +09:00
Shirofune-Security 1dfd3a92b9 Stack intended-reader EVTX recovery on the approved native auditing batch 2026-09-22 14:56:09 +09:00
Shirofune-Security 488d179f09 Count the root in bounded WMI descriptor evidence 2026-09-22 14:49:07 +09:00
Shirofune-Security e34ede7c38 Require exact native inherited and protected subtree outcomes 2026-09-22 14:46:26 +09:00
Shirofune-Security 8546d319eb Reject unexplained descendant changes and unrelated WMI command arguments 2026-09-22 14:45:06 +09:00
Shirofune-Security ddcdd8e2b8 Document bounded WMI tree guarantees and record native protection behavior 2026-09-22 14:40:25 +09:00
Shirofune-Security 036f51886a Exercise descendant drift and use supported workflow shell dispatch 2026-09-22 14:36:48 +09:00
Shirofune-Security ea184e5e95 Guard WMI inheritance with bounded descendant observations 2026-09-22 14:33:54 +09:00
Shirofune-Security b556b82ebc Integrate native DNS probe with current dev commands and release guides 2026-09-22 14:25:44 +09:00
Shirofune-Security 3ba8a45d80 Integrate current native auditing commands with transcript verification 2026-09-22 14:24:29 +09:00
Shirofune-Security 0ef22f20fa Merge dev and preserve leaf-file SACL recovery integration 2026-09-22 14:24:24 +09:00
Shirofune-Security 4598bb36f7 Integrate current dev with intended-reader EVTX verification 2026-09-22 14:24:04 +09:00
Shirofune-Security 397dfbf006 Merge dev and preserve named registry recovery integration 2026-09-22 14:23:55 +09:00
Shirofune-Security 7ef29df61f Integrate reviewed native auditing batch and preserve 4703 validation 2026-09-22 14:23:44 +09:00
Shirofune-Security 2fef35da23 Integrate reviewed native auditing commands with OneSettings validation 2026-09-22 14:23:33 +09:00
Shirofune-Security 005b249c3b Integrate reviewed filesystem and WEF query changes with scoped NTLM auditing 2026-09-22 14:23:24 +09:00
Shirofune-Security 34b7a775c4 Merge dev and preserve filesystem lifecycle and WEF query changes 2026-09-22 14:23:10 +09:00
Shirofune-Security 4d34305097 test: bind token task metadata to the native publisher XML namespace 2026-09-22 12:44:51 +09:00
Shirofune-Security 10c50b9a74 test: corroborate runtime token task and measure full native verification 2026-09-22 12:43:31 +09:00
Shirofune-Security b5e244bb68 test: retain exact native publisher task metadata for attribution diagnosis 2026-09-22 12:40:04 +09:00
Shirofune-Security 3fb0f8aa6c fix: decode native WEF XML independently of property count 2026-09-22 12:37:37 +09:00
Shirofune-Security 160b573a99 test: bind native 4703 attribution to installed schema and exact restored context 2026-09-22 12:34:43 +09:00
Shirofune-Security 9692edcec6 fix: normalize native WEF reader tokens before strict validation 2026-09-22 12:30:51 +09:00
Shirofune-Security 495f12a30f test: bound token attribution worker and retain independent cleanup evidence 2026-09-22 12:24:53 +09:00
Shirofune-Security 5bebb9a7a5 test: isolate native 4703 audit attribution and retain query diagnostics 2026-09-22 12:22:21 +09:00
Shirofune-Security c18f971420 Avoid owned user profile creation and verify native fixture inventories 2026-09-22 12:16:06 +09:00
Shirofune-Security ad7ddf4de7 Handle native host casing and timestamp compatibility in query evidence 2026-09-22 12:14:05 +09:00
Shirofune-Security bf40f3d856 test: compare actual Privacy buffer readback after native rounding 2026-09-22 12:10:46 +09:00
Shirofune-Security f27238ebd5 Validate typed source inputs and preserve caller scope in query reader 2026-09-22 12:10:03 +09:00
Shirofune-Security 6f713e7497 fix: require running WMI before scoped NTLM observations 2026-09-22 12:06:11 +09:00
Shirofune-Security 353159615e fix: preserve omitted notification selection and document native OneSettings acceptance 2026-09-22 12:06:07 +09:00
Shirofune-Security f87ce48206 test: exercise public OneSettings policy and Privacy channel configuration 2026-09-22 12:03:18 +09:00
Shirofune-Security b162c4e598 feat: configure selected incoming and domain NTLM audit policies 2026-09-22 12:03:11 +09:00
Shirofune-Security 54f9d6bf51 Add bounded native preflight for one selected WEF QueryList 2026-09-22 12:00:26 +09:00
Shirofune-Security 6feb0d8a33 test: complete filesystem lifecycle fixture dependencies and evidence guide 2026-09-22 11:59:29 +09:00
Shirofune-Security 7136dadeac test: measure fixed already-enabled debug privilege adjustment 2026-09-22 11:59:26 +09:00
Shirofune-Security 8496b86b88 test: exercise public redirected filesystem SACL lifecycle and native4663 2026-09-22 11:54:37 +09:00
Shirofune-Security cd65133fc4 test: verify fixed native token privilege adjustment feasibility 2026-09-22 11:51:31 +09:00
Shirofune-Security 0f95115908 test: establish owned redirected-profile native SACL fixture 2026-09-22 11:49:31 +09:00
Shirofune-Security 70a812556d Merge commit '29f03e352823af81b35869659928a94e70df4cf9' into feat/373-registry-sacl-recovery
# Conflicts:
#	.gitattributes
#	.github/workflows/release.yml
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-22 11:43:28 +09:00
Shirofune-Security 29f03e3528 Merge commit '559a9d1b8234f11642ba0ca4ea4a93b048bbd15f' into test/377-native-smb-policy
# Conflicts:
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-22 11:42:50 +09:00
Shirofune-Security 559a9d1b82 Merge commit '008a8c80b9820318be8d9f833c6adf31c2dbf9a9' into feat/362-scoped-outgoing-ntlm
# Conflicts:
#	.github/workflows/release.yml
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-22 11:42:30 +09:00
Shirofune-Security 008a8c80b9 Merge remote-tracking branch 'origin/dev' into fix/368-native-collector-observation
# Conflicts:
#	.github/workflows/release.yml
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-22 11:42:00 +09:00
Shirofune-Security 9f2dad6e20 test: retain native registry separators in isolated child scenario 2026-09-22 11:03:48 +09:00
Shirofune-Security 494f9c2f93 fix: accept exact native empty catalog representations and document recovery 2026-09-22 11:01:38 +09:00