 Shirofune-Security
|
8834dba4e6
|
Merge commit '45b6be91a8a35e1f08f6138fff70e0c6fafc58d1' into feat/387-native-rule-eligibility
# Conflicts:
# CHANGELOG-Japanese.md
# CHANGELOG.md
# WELA.ps1
# tests/AuditProfileOutput.Tests.ps1
# tests/NativeProviders.Tests.ps1
# website/docs/resources/changelog.ja.md
# website/docs/resources/changelog.md
|
2026-09-19 11:46:07 +09:00 |
|
|
Shirofune-Security
|
852de965a6
|
Merge commit 'f9303313148c80ad1d26376b943459d38598547b' into feat/387-native-rule-eligibility
# Conflicts:
# CHANGELOG-Japanese.md
# CHANGELOG.md
# WELA.ps1
# website/docs/resources/changelog.ja.md
# website/docs/resources/changelog.md
|
2026-09-19 11:45:05 +09:00 |
|
|
Shirofune-Security
|
2df9715dc1
|
Use explicit canonical framing for portable metadata hashes
|
2026-09-19 07:39:47 +09:00 |
|
|
Shirofune-Security
|
f930331314
|
Clear handled native-read exit status after Windows smoke assertions
|
2026-09-19 07:35:04 +09:00 |
|
|
Shirofune-Security
|
e8a0aeb59b
|
Keep rule evidence identities stable across Windows checkouts and shells
|
2026-09-19 07:34:10 +09:00 |
|
|
Shirofune-Security
|
0403f14446
|
Clear expected child failure exit status after CLI assertions
|
2026-09-19 07:33:32 +09:00 |
|
|
Shirofune-Security
|
787c66e009
|
Normalize WEF XML evidence before PowerShell 5.1 JSON serialization
|
2026-09-19 07:31:23 +09:00 |
|
|
Shirofune-Security
|
1106fd0900
|
Verify HTML evidence encoding across PowerShell JSON serializers
|
2026-09-19 07:28:29 +09:00 |
|
|
Shirofune-Security
|
781c420481
|
Use explicit Windows test shells and link eligibility changelog
|
2026-09-19 07:26:46 +09:00 |
|
|
Shirofune-Security
|
d6da8f82c8
|
Retain recorded eligibility evidence scope in HTML reports
|
2026-09-19 07:25:44 +09:00 |
|
|
Shirofune-Security
|
9b93473904
|
Link WEF provisioning changelog to PR 406
|
2026-09-19 07:24:31 +09:00 |
|
|
Shirofune-Security
|
36ad97114c
|
Assess native rule eligibility with explicit evidence gates
|
2026-09-19 07:24:04 +09:00 |
|
|
Shirofune-Security
|
9a69600947
|
Add opt-in native WEF source and collector subscription controls
|
2026-09-19 07:23:47 +09:00 |
|
|
Shirofune-Security
|
45b6be91a8
|
Link audit catalog changelog entries to PR 403
|
2026-09-19 07:07:43 +09:00 |
|
|
Shirofune-Security
|
b2b7e0a9f7
|
Correct legacy token audit GUID and validate catalog mapping uncertainty
|
2026-09-19 07:01:50 +09:00 |
|
|
田中ザック Isaac Mathis
|
3f6fe32ce7
|
Merge pull request #402 from Shirofune-Security/feat/371-ad-object-sacl
Add opt-in AD object and Configuration partition audit SACLs
|
2026-09-19 19:49:50 +09:00 |
|
|
田中ザック Isaac Mathis
|
5665fd2f0f
|
Merge pull request #401 from Shirofune-Security/feat/367-native-channel-access
Configure native WEF channel prerequisites and CAPI2 read access
|
2026-09-19 19:49:07 +09:00 |
|
|
田中ザック Isaac Mathis
|
f0444aedef
|
Merge pull request #400 from Shirofune-Security/feat/381-applocker-readiness
Assess native AppLocker readiness and guard audit-only imports
|
2026-09-19 19:48:26 +09:00 |
|
|
田中ザック Isaac Mathis
|
423277428a
|
Merge pull request #399 from Shirofune-Security/feat/372-wmi-namespace-auditing
Add opt-in WMI namespace audit SACL configuration
|
2026-09-19 19:45:11 +09:00 |
|
|
田中ザック Isaac Mathis
|
ded0b9c375
|
Merge pull request #398 from Shirofune-Security/feat/373-targeted-sacl-planning
Plan targeted SACL prerequisites alongside audit profiles
|
2026-09-19 19:41:51 +09:00 |
|
|
Shirofune-Security
|
9d993a2a7e
|
Merge branch 'feat/367-native-channel-access' into feat/371-ad-object-sacl
# Conflicts:
# CHANGELOG-Japanese.md
# CHANGELOG.md
# WELA.ps1
# scripts/Configuration.ps1
# website/docs/resources/changelog.ja.md
# website/docs/resources/changelog.md
|
2026-09-19 06:54:08 +09:00 |
|
|
Shirofune-Security
|
0229348963
|
Merge branch 'feat/381-applocker-readiness' into feat/367-native-channel-access
# Conflicts:
# CHANGELOG-Japanese.md
# CHANGELOG.md
# WELA.ps1
# scripts/Configuration.ps1
# website/docs/resources/changelog.ja.md
# website/docs/resources/changelog.md
|
2026-09-19 06:53:25 +09:00 |
|
|
Shirofune-Security
|
aff422bf99
|
Merge remote-tracking branch 'origin/dev' into feat/381-applocker-readiness
# Conflicts:
# WELA.ps1
|
2026-09-19 06:52:50 +09:00 |
|
|
Shirofune-Security
|
86ac6e7bd6
|
Merge dev targeted SACL planning into AppLocker readiness branch
|
2026-09-19 06:51:13 +09:00 |
|
|
Shirofune-Security
|
d83c2419b0
|
Merge remote-tracking branch 'origin/dev' into feat/367-native-channel-access
# Conflicts:
# WELA.ps1
|
2026-09-19 06:51:10 +09:00 |
|
|
Shirofune-Security
|
47302ef9ae
|
Merge remote-tracking branch 'origin/dev' into feat/371-ad-object-sacl
|
2026-09-19 06:50:32 +09:00 |
|
|
Shirofune-Security
|
2c0bbfae0b
|
Merge remote-tracking branch 'origin/dev' into feat/372-wmi-namespace-auditing
|
2026-09-19 06:49:04 +09:00 |
|
|
Shirofune-Security
|
a74a3e79f0
|
Handle unused AppLocker placeholders without weakening merge enforcement guards
|
2026-09-19 06:25:36 +09:00 |
|
|
Shirofune-Security
|
bf12f186fb
|
Record verified WMI control flags and disposable test scope
|
2026-09-19 06:23:14 +09:00 |
|
|
Shirofune-Security
|
521fe3b826
|
Preserve configured user-file suffixes in SACL plans
|
2026-09-19 06:21:18 +09:00 |
|
|
Shirofune-Security
|
92bf29ec22
|
Isolate unknown dMSA prerequisites from other AD audit classes
|
2026-09-19 06:20:41 +09:00 |
|
|
Shirofune-Security
|
072bcdf6af
|
Verify native WMI SACL flags on disposable Windows namespaces
|
2026-09-19 06:20:32 +09:00 |
|
|
Shirofune-Security
|
cbd1c0643b
|
Confirm AD SACL receipt ownership and validate exact PKI parent
|
2026-09-19 05:47:54 +09:00 |
|
|
Shirofune-Security
|
496423bb8c
|
Reference PR 402 in bilingual changelogs
|
2026-09-19 05:44:21 +09:00 |
|
|
Shirofune-Security
|
c338dae12e
|
Add opt-in AD directory object SACL profiles and recovery (issue #371)
|
2026-09-19 05:42:25 +09:00 |
|
|
Shirofune-Security
|
38bceb3de1
|
Construct unknown ACE fixture without PowerShell enum validation
|
2026-09-19 05:42:06 +09:00 |
|
|
Shirofune-Security
|
d7f710c9ad
|
Restrict native WMI writes to SACL and verify privilege cleanup
|
2026-09-19 05:41:08 +09:00 |
|
|
Shirofune-Security
|
5f240d8062
|
Verify locked AppLocker import bytes and reject ignored options
|
2026-09-19 05:40:08 +09:00 |
|
|
Shirofune-Security
|
75fd28a3d5
|
Use integer masks for byte-backed ACE flags on PowerShell 5.1
|
2026-09-19 05:40:00 +09:00 |
|
|
Shirofune-Security
|
c89a28190a
|
Bind Windows descriptor byte overload explicitly and link PR 401
|
2026-09-19 05:38:28 +09:00 |
|
|
Shirofune-Security
|
1acfec66a3
|
Read unexpanded ProfileList paths before validation
|
2026-09-19 05:36:43 +09:00 |
|
|
Shirofune-Security
|
1bf6bc26b3
|
Add opt-in native WEF channel settings and preserved CAPI2 read access
|
2026-09-19 05:36:29 +09:00 |
|
|
Shirofune-Security
|
acde16f149
|
Guard targeted SACL planning paths and ignored skip options
|
2026-09-19 05:35:23 +09:00 |
|
|
Shirofune-Security
|
6fbef0ff6b
|
Reference PR 400 in bilingual changelogs
|
2026-09-19 05:35:09 +09:00 |
|
|
Shirofune-Security
|
45ab6bcc8c
|
Reference PR 399 in bilingual changelogs
|
2026-09-19 05:34:58 +09:00 |
|
|
Shirofune-Security
|
9ffd2bd758
|
Assess native AppLocker readiness and guard audit-only imports
|
2026-09-19 05:34:12 +09:00 |
|
|
Shirofune-Security
|
6489775d30
|
Reference PR 398 in bilingual changelogs
|
2026-09-19 05:30:50 +09:00 |
|
|
Shirofune-Security
|
80db17891d
|
Add opt-in WMI namespace audit SACL workflow
|
2026-09-19 05:30:12 +09:00 |
|
|
Shirofune-Security
|
b861e86d3a
|
Plan targeted SACL prerequisites alongside audit profiles
|
2026-09-19 05:25:38 +09:00 |
|
|
Shirofune-Security
|
385f367ae5
|
Provision DFS Namespace for full configuration CI
|
2026-09-19 05:05:47 +09:00 |
|