 Shirofune-Security
|
ea184e5e95
|
Guard WMI inheritance with bounded descendant observations
|
2026-09-22 14:33:54 +09:00 |
|
|
Shirofune-Security
|
7ef29df61f
|
Integrate reviewed native auditing batch and preserve 4703 validation
|
2026-09-22 14:23:44 +09:00 |
|
|
Shirofune-Security
|
2fef35da23
|
Integrate reviewed native auditing commands with OneSettings validation
|
2026-09-22 14:23:33 +09:00 |
|
|
Shirofune-Security
|
005b249c3b
|
Integrate reviewed filesystem and WEF query changes with scoped NTLM auditing
|
2026-09-22 14:23:24 +09:00 |
|
|
Shirofune-Security
|
34b7a775c4
|
Merge dev and preserve filesystem lifecycle and WEF query changes
|
2026-09-22 14:23:10 +09:00 |
|
|
田中ザック Isaac Mathis
|
015d56c92b
|
Merge pull request #463 from Shirofune-Security/test/373-native-filesystem-sacl-lifecycle
test: validate public redirected filesystem SACL lifecycle
|
2026-09-22 14:21:46 +09:00 |
|
|
Shirofune-Security
|
4d34305097
|
test: bind token task metadata to the native publisher XML namespace
|
2026-09-22 12:44:51 +09:00 |
|
|
Shirofune-Security
|
10c50b9a74
|
test: corroborate runtime token task and measure full native verification
|
2026-09-22 12:43:31 +09:00 |
|
|
Shirofune-Security
|
b5e244bb68
|
test: retain exact native publisher task metadata for attribution diagnosis
|
2026-09-22 12:40:04 +09:00 |
|
|
Shirofune-Security
|
3fb0f8aa6c
|
fix: decode native WEF XML independently of property count
|
2026-09-22 12:37:37 +09:00 |
|
|
Shirofune-Security
|
160b573a99
|
test: bind native 4703 attribution to installed schema and exact restored context
|
2026-09-22 12:34:43 +09:00 |
|
|
Shirofune-Security
|
c96ae4541c
|
test: retain precise native WEF XML boundary diagnostics
|
2026-09-22 12:33:44 +09:00 |
|
|
Shirofune-Security
|
9692edcec6
|
fix: normalize native WEF reader tokens before strict validation
|
2026-09-22 12:30:51 +09:00 |
|
|
Shirofune-Security
|
495f12a30f
|
test: bound token attribution worker and retain independent cleanup evidence
|
2026-09-22 12:24:53 +09:00 |
|
|
Shirofune-Security
|
5bebb9a7a5
|
test: isolate native 4703 audit attribution and retain query diagnostics
|
2026-09-22 12:22:21 +09:00 |
|
|
Shirofune-Security
|
f9c9281852
|
Merge remote-tracking branch 'origin/dev' into feat/380-native-token-right-probe
|
2026-09-22 12:21:00 +09:00 |
|
|
Shirofune-Security
|
39ca39bf2e
|
Merge remote-tracking branch 'origin/dev' into test/378-native-onesettings-configure
|
2026-09-22 12:19:05 +09:00 |
|
|
Shirofune-Security
|
1dfb66fb40
|
Merge remote-tracking branch 'origin/dev' into feat/368-native-wef-query
|
2026-09-22 12:16:48 +09:00 |
|
|
Shirofune-Security
|
8e295904ba
|
Merge remote-tracking branch 'origin/dev' into feat/363-scoped-ntlm-auditing
|
2026-09-22 12:16:35 +09:00 |
|
|
Shirofune-Security
|
656a20d620
|
Merge remote-tracking branch 'origin/dev' into test/373-native-filesystem-sacl-lifecycle
|
2026-09-22 12:16:22 +09:00 |
|
|
Shirofune-Security
|
c18f971420
|
Avoid owned user profile creation and verify native fixture inventories
|
2026-09-22 12:16:06 +09:00 |
|
|
田中ザック Isaac Mathis
|
0ebe99b390
|
Merge pull request #462 from Shirofune-Security/feat/373-registry-sacl-recovery
feat: recover one proven registry-root audit ACE
|
2026-09-22 12:15:46 +09:00 |
|
|
田中ザック Isaac Mathis
|
857e6b0b06
|
Merge pull request #461 from Shirofune-Security/test/377-native-smb-policy
Verify public SMB audit policy configuration on native Windows
|
2026-09-22 12:15:40 +09:00 |
|
|
Shirofune-Security
|
ad7ddf4de7
|
Handle native host casing and timestamp compatibility in query evidence
|
2026-09-22 12:14:05 +09:00 |
|
|
Shirofune-Security
|
bf40f3d856
|
test: compare actual Privacy buffer readback after native rounding
|
2026-09-22 12:10:46 +09:00 |
|
|
Shirofune-Security
|
f27238ebd5
|
Validate typed source inputs and preserve caller scope in query reader
|
2026-09-22 12:10:03 +09:00 |
|
|
Shirofune-Security
|
6f713e7497
|
fix: require running WMI before scoped NTLM observations
|
2026-09-22 12:06:11 +09:00 |
|
|
Shirofune-Security
|
353159615e
|
fix: preserve omitted notification selection and document native OneSettings acceptance
|
2026-09-22 12:06:07 +09:00 |
|
|
田中ザック Isaac Mathis
|
9720ad7886
|
Merge pull request #460 from Shirofune-Security/feat/362-scoped-outgoing-ntlm
Add scoped outgoing NTLM audit configuration
|
2026-09-22 12:03:49 +09:00 |
|
|
田中ザック Isaac Mathis
|
35ea5b87ef
|
Merge pull request #459 from Shirofune-Security/fix/368-native-collector-observation
Fix native collector subscription inventory and Unicode evidence
|
2026-09-22 12:03:46 +09:00 |
|
|
Shirofune-Security
|
f87ce48206
|
test: exercise public OneSettings policy and Privacy channel configuration
|
2026-09-22 12:03:18 +09:00 |
|
|
Shirofune-Security
|
b162c4e598
|
feat: configure selected incoming and domain NTLM audit policies
|
2026-09-22 12:03:11 +09:00 |
|
|
Shirofune-Security
|
54f9d6bf51
|
Add bounded native preflight for one selected WEF QueryList
|
2026-09-22 12:00:26 +09:00 |
|
|
Shirofune-Security
|
6feb0d8a33
|
test: complete filesystem lifecycle fixture dependencies and evidence guide
|
2026-09-22 11:59:29 +09:00 |
|
|
Shirofune-Security
|
7136dadeac
|
test: measure fixed already-enabled debug privilege adjustment
|
2026-09-22 11:59:26 +09:00 |
|
|
Shirofune-Security
|
8496b86b88
|
test: exercise public redirected filesystem SACL lifecycle and native4663
|
2026-09-22 11:54:37 +09:00 |
|
|
Shirofune-Security
|
cd65133fc4
|
test: verify fixed native token privilege adjustment feasibility
|
2026-09-22 11:51:31 +09:00 |
|
|
Shirofune-Security
|
0f95115908
|
test: establish owned redirected-profile native SACL fixture
|
2026-09-22 11:49:31 +09:00 |
|
|
Shirofune-Security
|
70a812556d
|
Merge commit '29f03e352823af81b35869659928a94e70df4cf9' into feat/373-registry-sacl-recovery
# Conflicts:
# .gitattributes
# .github/workflows/release.yml
# CHANGELOG-Japanese.md
# CHANGELOG.md
# website/docs/resources/changelog.ja.md
# website/docs/resources/changelog.md
|
2026-09-22 11:43:28 +09:00 |
|
|
Shirofune-Security
|
29f03e3528
|
Merge commit '559a9d1b8234f11642ba0ca4ea4a93b048bbd15f' into test/377-native-smb-policy
# Conflicts:
# CHANGELOG-Japanese.md
# CHANGELOG.md
# website/docs/resources/changelog.ja.md
# website/docs/resources/changelog.md
|
2026-09-22 11:42:50 +09:00 |
|
|
Shirofune-Security
|
559a9d1b82
|
Merge commit '008a8c80b9820318be8d9f833c6adf31c2dbf9a9' into feat/362-scoped-outgoing-ntlm
# Conflicts:
# .github/workflows/release.yml
# CHANGELOG-Japanese.md
# CHANGELOG.md
# website/docs/resources/changelog.ja.md
# website/docs/resources/changelog.md
|
2026-09-22 11:42:30 +09:00 |
|
|
Shirofune-Security
|
008a8c80b9
|
Merge remote-tracking branch 'origin/dev' into fix/368-native-collector-observation
# Conflicts:
# .github/workflows/release.yml
# CHANGELOG-Japanese.md
# CHANGELOG.md
# website/docs/resources/changelog.ja.md
# website/docs/resources/changelog.md
|
2026-09-22 11:42:00 +09:00 |
|
|
田中ザック Isaac Mathis
|
cd0f566b7e
|
Merge pull request #458 from Shirofune-Security/test/386-native-provider-configure
Fix WinRM provider ID overflow and validate native pack configuration
|
2026-09-22 11:41:17 +09:00 |
|
|
Shirofune-Security
|
9f2dad6e20
|
test: retain native registry separators in isolated child scenario
|
2026-09-22 11:03:48 +09:00 |
|
|
Shirofune-Security
|
494f9c2f93
|
fix: accept exact native empty catalog representations and document recovery
|
2026-09-22 11:01:38 +09:00 |
|
|
Shirofune-Security
|
7a29bdc2b2
|
Merge remote-tracking branch 'origin/dev' into feat/373-registry-sacl-recovery
|
2026-09-22 10:57:17 +09:00 |
|
|
Shirofune-Security
|
314d25e6a2
|
fix: validate native empty catalogue and exercise registry recovery refusals
|
2026-09-22 10:57:17 +09:00 |
|
|
Shirofune-Security
|
8639bbd750
|
Pass literal named switches in negative public provider cases
|
2026-09-22 10:23:04 +09:00 |
|
|
Shirofune-Security
|
180ecaddbf
|
Use explicit supported shells for native collector smoke
|
2026-09-22 10:22:44 +09:00 |
|
|
Shirofune-Security
|
43e5479fbc
|
Retain independent cleanup snapshots and exercise native read-only smoke
|
2026-09-22 10:15:48 +09:00 |
|