Shirofune-Security
8af856ffa6
Validate public provider pack configuration on native Windows
2026-09-22 09:40:56 +09:00
田中ザック Isaac Mathis
d20b240611
Merge pull request #453 from Shirofune-Security/test/364-native-profile-configuration
...
Verify public audit-profile configuration on native Windows
2026-09-22 09:33:42 +09:00
Shirofune-Security
197306b523
Preserve independent cleanup attempts and record actual native host context
2026-09-22 08:00:52 +09:00
田中ザック Isaac Mathis
c223d536cc
Merge pull request #452 from Shirofune-Security/feat/368-reviewed-wec-listener
...
Add reviewed exact-IP WEC listener creation
2026-09-22 07:59:54 +09:00
田中ザック Isaac Mathis
1c0ac4b470
Merge pull request #451 from Shirofune-Security/feat/373-native-file-access-probe
...
Add an explicit one-byte file access probe with native 4663 evidence
2026-09-22 07:59:47 +09:00
田中ザック Isaac Mathis
c0e70b5728
Merge pull request #450 from Shirofune-Security/feat/381-native-applocker-script-probe
...
Add native AppLocker Script event proof
2026-09-22 07:59:40 +09:00
田中ザック Isaac Mathis
fd24c4948a
Merge pull request #448 from Shirofune-Security/fix/365-reject-unbound-cli-arguments
...
Reject unknown CLI options before configuration runs
2026-09-22 07:59:34 +09:00
Shirofune-Security
9a4a3fca95
Exercise public profile configuration against native audit policy
2026-09-22 07:41:18 +09:00
Shirofune-Security
39e8ce1d70
Resolve combined native source line-ending attributes
2026-09-22 07:25:54 +09:00
Shirofune-Security
0d1adfb442
Integrate reviewed CLI, channel and native probe changes
2026-09-22 07:25:37 +09:00
Shirofune-Security
c89a21f81b
Integrate reviewed CLI, channels and AppLocker Script probe
2026-09-22 07:24:32 +09:00
Shirofune-Security
f3bd83a521
Integrate reviewed CLI and native channel configuration changes
2026-09-22 07:23:48 +09:00
Shirofune-Security
6365402f16
Clarify unsupported common parameters and integrate native channel tests
2026-09-22 07:21:55 +09:00
田中ザック Isaac Mathis
52e09638ad
Merge pull request #449 from Shirofune-Security/test/367-native-channel-configuration
...
Add native acceptance tests for channel-settings
2026-09-22 07:21:08 +09:00
Shirofune-Security
8bd7aa0c74
Verify effective native worker module path and complete fixture exit status
2026-09-21 23:07:16 +09:00
Shirofune-Security
2301bf1e85
Bind native listener adapter modules and normalize cross-engine context JSON
2026-09-21 23:03:17 +09:00
Shirofune-Security
3e9ba8c403
Create one reviewed exact-IP collector listener through a bounded native adapter
2026-09-21 22:58:08 +09:00
Shirofune-Security
ee254e6c54
Merge remote-tracking branch 'origin/dev' into feat/368-reviewed-wec-listener
2026-09-21 22:57:53 +09:00
Shirofune-Security
d832b1e090
Measure held-readback phase and refuse implementation targets before hashing
2026-09-21 22:51:50 +09:00
Shirofune-Security
03bc63e996
Respect inherited execution policy for the fixed file worker
2026-09-21 22:43:07 +09:00
Shirofune-Security
ce7b49a5ac
Bind observed native file paths and document exact read evidence
2026-09-21 22:40:50 +09:00
Shirofune-Security
4905f82eb5
Add reviewed WEC listener CLI contract and operator guide
2026-09-21 22:40:05 +09:00
Shirofune-Security
dc4360a886
Merge branch 'feat/375-firewall-log-recovery' into feat/373-native-file-access-probe
...
# Conflicts:
# WELA.ps1
2026-09-21 22:38:41 +09:00
Shirofune-Security
eb1b9989a1
Load the service enum for isolated Windows PowerShell fixtures
2026-09-21 22:38:22 +09:00
Shirofune-Security
506333c501
Use a fixed native Windows PowerShell 5.1 listener adapter
2026-09-21 22:36:15 +09:00
田中ザック Isaac Mathis
7d4d582852
Merge pull request #447 from Shirofune-Security/feat/375-firewall-log-recovery
...
Add guarded single-profile firewall logging recovery
2026-09-21 22:35:10 +09:00
田中ザック Isaac Mathis
fa1190e12c
Merge pull request #446 from Shirofune-Security/feat/386-native-capi2-probe
...
Measure a fixed offline native CAPI2 certificate-chain event
2026-09-21 22:34:41 +09:00
Shirofune-Security
37e93e10eb
Refuse stopped service dependencies before AppLocker CIM observation
2026-09-21 22:34:09 +09:00
田中ザック Isaac Mathis
0ae8c00443
Merge pull request #443 from Shirofune-Security/feat/376-transcription-recovery
...
Add reviewed native transcription policy recovery
2026-09-21 22:30:25 +09:00
Shirofune-Security
c1aaa693ac
Pass explicit held listener XML through the typed native cmdlet
2026-09-21 22:30:13 +09:00
Shirofune-Security
bfbdc6c476
Read the owned release pipe with encoding-preamble detection
2026-09-21 22:29:03 +09:00
Shirofune-Security
4f653c5185
Record merged dev ancestry without changing the reviewed tree
2026-09-21 22:28:49 +09:00
Shirofune-Security
019f13b566
Merge branch 'feat/375-firewall-log-recovery' into feat/381-native-applocker-script-probe
...
# Conflicts:
# .github/workflows/release.yml
# CHANGELOG-Japanese.md
# CHANGELOG.md
# website/docs/resources/changelog.ja.md
# website/docs/resources/changelog.md
2026-09-21 22:27:49 +09:00
Shirofune-Security
a61181e860
Checkpoint exact native one-byte file access probe
2026-09-21 22:27:26 +09:00
Shirofune-Security
25fa7200a0
Checkpoint native local WSMan create with fixed listener XML
2026-09-21 22:27:05 +09:00
Shirofune-Security
ef64b08bd2
Document Script evidence boundaries and retain bounded startup diagnostics
2026-09-21 22:26:34 +09:00
Shirofune-Security
29bdc908c5
Integrate the reviewed native recovery and probe batch
2026-09-21 22:26:32 +09:00
Shirofune-Security
f05f852286
Retain native channel preservation evidence and document acceptance limits
2026-09-21 22:26:15 +09:00
Shirofune-Security
d0973a832d
Integrate reviewed native probes and recovery commands
2026-09-21 22:25:37 +09:00
Shirofune-Security
3919ba5d4a
Document supported CLI preview options
2026-09-21 22:25:02 +09:00
Shirofune-Security
72c2d14046
Merge branch 'feat/375-firewall-log-recovery' into feat/368-reviewed-wec-listener
2026-09-21 22:24:50 +09:00
田中ザック Isaac Mathis
7bfd8f65a6
Add reviewed event-log size and retention recovery ( #445 )
...
* Add reviewed recovery of completed event-log size and retention changes
* Select 64-bit size comparison on Windows PowerShell 5.1
* Require typed completion and identity fields in recovery evidence
* Preserve supported UTC timestamp parsing in recovery history
* Bind the reviewed native host gate and context dependency
* Refuse unknown recovery options before native restoration
2026-09-21 22:24:21 +09:00
Shirofune-Security
8fed328442
Integrate the reviewed recovery and native probe batch
2026-09-21 22:23:25 +09:00
Shirofune-Security
b018135e73
Use canonical WSMan listener resource URI across PowerShell engines
2026-09-21 22:22:50 +09:00
Shirofune-Security
8ac4c45653
Add fixed native AppLocker Script probe and disposable evidence matrix
2026-09-21 22:22:21 +09:00
Shirofune-Security
cba6162cb5
Compare configured channel XML with explicit enabled-field allowance
2026-09-21 22:22:20 +09:00
Shirofune-Security
2f442af4da
Integrate reviewed recovery and failed-logon commands
2026-09-21 22:21:35 +09:00
Shirofune-Security
c4e9e765ff
Integrate reviewed event-log recovery and failed-logon changes
2026-09-21 22:20:02 +09:00
Shirofune-Security
b9a6534424
Exercise public channel configuration on disposable Windows
2026-09-21 22:18:35 +09:00
Shirofune-Security
4df3bb4c79
Reject unknown CLI arguments before legacy command dispatch
2026-09-21 22:16:44 +09:00
Shirofune-Security