Commit Graph
225 Commits
Author SHA1 Message Date
Shirofune-Security e419b073fe Document scoped PowerShell controls and align native evidence boundaries 2026-09-22 14:43:40 +09:00
Shirofune-Security 3f613ea19c Add scoped Windows PowerShell logging policy and native validation 2026-09-22 14:37:38 +09:00
Shirofune-Security 7ef29df61f Integrate reviewed native auditing batch and preserve 4703 validation 2026-09-22 14:23:44 +09:00
Shirofune-Security 2fef35da23 Integrate reviewed native auditing commands with OneSettings validation 2026-09-22 14:23:33 +09:00
Shirofune-Security 005b249c3b Integrate reviewed filesystem and WEF query changes with scoped NTLM auditing 2026-09-22 14:23:24 +09:00
Shirofune-Security 34b7a775c4 Merge dev and preserve filesystem lifecycle and WEF query changes 2026-09-22 14:23:10 +09:00
Shirofune-Security 160b573a99 test: bind native 4703 attribution to installed schema and exact restored context 2026-09-22 12:34:43 +09:00
Shirofune-Security f27238ebd5 Validate typed source inputs and preserve caller scope in query reader 2026-09-22 12:10:03 +09:00
Shirofune-Security 353159615e fix: preserve omitted notification selection and document native OneSettings acceptance 2026-09-22 12:06:07 +09:00
Shirofune-Security f87ce48206 test: exercise public OneSettings policy and Privacy channel configuration 2026-09-22 12:03:18 +09:00
Shirofune-Security b162c4e598 feat: configure selected incoming and domain NTLM audit policies 2026-09-22 12:03:11 +09:00
Shirofune-Security 54f9d6bf51 Add bounded native preflight for one selected WEF QueryList 2026-09-22 12:00:26 +09:00
Shirofune-Security 6feb0d8a33 test: complete filesystem lifecycle fixture dependencies and evidence guide 2026-09-22 11:59:29 +09:00
Shirofune-Security cd65133fc4 test: verify fixed native token privilege adjustment feasibility 2026-09-22 11:51:31 +09:00
Shirofune-Security 0f95115908 test: establish owned redirected-profile native SACL fixture 2026-09-22 11:49:31 +09:00
Shirofune-Security 70a812556d Merge commit '29f03e352823af81b35869659928a94e70df4cf9' into feat/373-registry-sacl-recovery
# Conflicts:
#	.gitattributes
#	.github/workflows/release.yml
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-22 11:43:28 +09:00
Shirofune-Security 29f03e3528 Merge commit '559a9d1b8234f11642ba0ca4ea4a93b048bbd15f' into test/377-native-smb-policy
# Conflicts:
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-22 11:42:50 +09:00
Shirofune-Security 559a9d1b82 Merge commit '008a8c80b9820318be8d9f833c6adf31c2dbf9a9' into feat/362-scoped-outgoing-ntlm
# Conflicts:
#	.github/workflows/release.yml
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-22 11:42:30 +09:00
Shirofune-Security 008a8c80b9 Merge remote-tracking branch 'origin/dev' into fix/368-native-collector-observation
# Conflicts:
#	.github/workflows/release.yml
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-22 11:42:00 +09:00
Shirofune-Security 494f9c2f93 fix: accept exact native empty catalog representations and document recovery 2026-09-22 11:01:38 +09:00
Shirofune-Security 314d25e6a2 fix: validate native empty catalogue and exercise registry recovery refusals 2026-09-22 10:57:17 +09:00
Shirofune-Security 180ecaddbf Use explicit supported shells for native collector smoke 2026-09-22 10:22:44 +09:00
Shirofune-Security 43e5479fbc Retain independent cleanup snapshots and exercise native read-only smoke 2026-09-22 10:15:48 +09:00
Shirofune-Security 530b49f26b feat: checkpoint reviewed native registry SACL recovery 2026-09-22 10:11:02 +09:00
Shirofune-Security 0777a5d0f8 Add scoped outgoing NTLM audit configuration with native acceptance 2026-09-22 10:09:37 +09:00
Shirofune-Security af88b87e01 Fix native collector subscription inventory and Unicode readback 2026-09-22 09:46:28 +09:00
Shirofune-Security f403521068 Merge commit '03039cb1c653f75cc0052ed93c7699290873058e' into test/386-native-provider-configure
# Conflicts:
#	.gitattributes
#	.github/workflows/release.yml
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-22 09:41:21 +09:00
Shirofune-Security 558ba6f2a8 Verify public SMB audit policy configuration on native Windows 2026-09-22 09:41:04 +09:00
Shirofune-Security 8af856ffa6 Validate public provider pack configuration on native Windows 2026-09-22 09:40:56 +09:00
Shirofune-Security 03039cb1c6 Merge commit 'ac45e8f72fead44765db26d4b543c60776e9fba0' into test/378-native-security-warning
# Conflicts:
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-22 09:35:07 +09:00
Shirofune-Security ac45e8f72f Merge commit 'dc7867b6bc1193e3b5d54a9c7368c0647c39b663' into test/373-native-registry-sacl-lifecycle
# Conflicts:
#	.gitattributes
#	.github/workflows/release.yml
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-22 09:35:07 +09:00
Shirofune-Security dc7867b6bc Merge commit 'ffe4ed473414438d5465156e15b62796393daf80' into feat/368-reviewed-wec-authorization
# Conflicts:
#	.gitattributes
#	.github/workflows/release.yml
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-22 09:35:07 +09:00
Shirofune-Security ffe4ed4734 Merge remote-tracking branch 'origin/dev' into feat/367-reviewed-channel-recovery 2026-09-22 09:33:52 +09:00
Shirofune-Security 9238633041 test: run registry fixtures in explicit native shells and document evidence 2026-09-22 08:06:51 +09:00
Shirofune-Security a62c3b7def test: exercise public registry SACL lifecycle and native4657 2026-09-22 08:01:48 +09:00
Shirofune-Security 0ff81052e6 Merge commit '39e8ce1' into feat/367-reviewed-channel-recovery
# Conflicts:
#	.gitattributes
#	.github/workflows/release.yml
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-22 07:53:01 +09:00
Shirofune-Security 0c51232a40 Add reviewed recovery of one completed native channel operation 2026-09-22 07:52:16 +09:00
Shirofune-Security 0051f8c662 Review and update only source SID authorization on disabled WEC subscriptions 2026-09-22 07:50:50 +09:00
Shirofune-Security b92c044dd9 Verify public Security warning policy configuration on native Windows 2026-09-22 07:50:09 +09:00
Shirofune-Security 9a4a3fca95 Exercise public profile configuration against native audit policy 2026-09-22 07:41:18 +09:00
Shirofune-Security 99cd1ea492 Merge commit '39e8ce1' into test/373-native-registry-sacl-lifecycle 2026-09-22 07:29:23 +09:00
Shirofune-Security 021ebecc62 Checkpoint an owned mounted hive through the public SACL catalog 2026-09-22 07:29:23 +09:00
Shirofune-Security 0d1adfb442 Integrate reviewed CLI, channel and native probe changes 2026-09-22 07:25:37 +09:00
Shirofune-Security c89a21f81b Integrate reviewed CLI, channels and AppLocker Script probe 2026-09-22 07:24:32 +09:00
Shirofune-Security f3bd83a521 Integrate reviewed CLI and native channel configuration changes 2026-09-22 07:23:48 +09:00
Shirofune-Security 6365402f16 Clarify unsupported common parameters and integrate native channel tests 2026-09-22 07:21:55 +09:00
Shirofune-Security 3e9ba8c403 Create one reviewed exact-IP collector listener through a bounded native adapter 2026-09-21 22:58:08 +09:00
Shirofune-Security ce7b49a5ac Bind observed native file paths and document exact read evidence 2026-09-21 22:40:50 +09:00
Shirofune-Security 4905f82eb5 Add reviewed WEC listener CLI contract and operator guide 2026-09-21 22:40:05 +09:00
Shirofune-Security dc4360a886 Merge branch 'feat/375-firewall-log-recovery' into feat/373-native-file-access-probe
# Conflicts:
#	WELA.ps1
2026-09-21 22:38:41 +09:00