Commit Graph
951 Commits
Author SHA1 Message Date
田中ザック Isaac Mathis f0444aedef Merge pull request #400 from Shirofune-Security/feat/381-applocker-readiness
Assess native AppLocker readiness and guard audit-only imports
2026-09-19 19:48:26 +09:00
田中ザック Isaac Mathis 423277428a Merge pull request #399 from Shirofune-Security/feat/372-wmi-namespace-auditing
Add opt-in WMI namespace audit SACL configuration
2026-09-19 19:45:11 +09:00
田中ザック Isaac Mathis ded0b9c375 Merge pull request #398 from Shirofune-Security/feat/373-targeted-sacl-planning
Plan targeted SACL prerequisites alongside audit profiles
2026-09-19 19:41:51 +09:00
Shirofune-Security aff422bf99 Merge remote-tracking branch 'origin/dev' into feat/381-applocker-readiness
# Conflicts:
#	WELA.ps1
2026-09-19 06:52:50 +09:00
Shirofune-Security 86ac6e7bd6 Merge dev targeted SACL planning into AppLocker readiness branch 2026-09-19 06:51:13 +09:00
Shirofune-Security 2c0bbfae0b Merge remote-tracking branch 'origin/dev' into feat/372-wmi-namespace-auditing 2026-09-19 06:49:04 +09:00
Shirofune-Security a74a3e79f0 Handle unused AppLocker placeholders without weakening merge enforcement guards 2026-09-19 06:25:36 +09:00
Shirofune-Security bf12f186fb Record verified WMI control flags and disposable test scope 2026-09-19 06:23:14 +09:00
Shirofune-Security 521fe3b826 Preserve configured user-file suffixes in SACL plans 2026-09-19 06:21:18 +09:00
Shirofune-Security 072bcdf6af Verify native WMI SACL flags on disposable Windows namespaces 2026-09-19 06:20:32 +09:00
Shirofune-Security d7f710c9ad Restrict native WMI writes to SACL and verify privilege cleanup 2026-09-19 05:41:08 +09:00
Shirofune-Security 5f240d8062 Verify locked AppLocker import bytes and reject ignored options 2026-09-19 05:40:08 +09:00
Shirofune-Security 1acfec66a3 Read unexpanded ProfileList paths before validation 2026-09-19 05:36:43 +09:00
Shirofune-Security acde16f149 Guard targeted SACL planning paths and ignored skip options 2026-09-19 05:35:23 +09:00
Shirofune-Security 6fbef0ff6b Reference PR 400 in bilingual changelogs 2026-09-19 05:35:09 +09:00
Shirofune-Security 45ab6bcc8c Reference PR 399 in bilingual changelogs 2026-09-19 05:34:58 +09:00
Shirofune-Security 9ffd2bd758 Assess native AppLocker readiness and guard audit-only imports 2026-09-19 05:34:12 +09:00
Shirofune-Security 6489775d30 Reference PR 398 in bilingual changelogs 2026-09-19 05:30:50 +09:00
Shirofune-Security 80db17891d Add opt-in WMI namespace audit SACL workflow 2026-09-19 05:30:12 +09:00
Shirofune-Security b861e86d3a Plan targeted SACL prerequisites alongside audit profiles 2026-09-19 05:25:38 +09:00
Shirofune-Security 385f367ae5 Provision DFS Namespace for full configuration CI 2026-09-19 05:05:47 +09:00
Shirofune-Security f2325b5e0b Merge commit 'be3a354' into HEAD
# Conflicts:
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	WELA.ps1
#	scripts/Configuration.ps1
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-19 04:50:15 +09:00
Shirofune-Security 3507734538 Merge commit '88c84fa' into HEAD
# Conflicts:
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	WELA.ps1
#	scripts/Configuration.ps1
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-19 04:49:40 +09:00
Shirofune-Security e43a43bf34 Merge commit '966aa21' into HEAD
# Conflicts:
#	CHANGELOG-Japanese.md
#	CHANGELOG.md
#	WELA.ps1
#	website/docs/resources/changelog.ja.md
#	website/docs/resources/changelog.md
2026-09-19 04:48:54 +09:00
Shirofune-Security 157fb56bee Merge commit 'a10e1d6' into HEAD
# Conflicts:
#	scripts/Configuration.ps1
2026-09-19 04:48:19 +09:00
Shirofune-Security 810bbb61ec Merge commit '24a77ee' into HEAD 2026-09-19 04:46:00 +09:00
Zach Mathis (田中ザック) c45f7a1319 Merge pull request #388 from Shirofune-Security/fix/362-outgoing-ntlm-audit
Document outgoing NTLM audit behavior in changelogs
2026-09-19 15:05:37 +09:00
Zach Mathis (田中ザック) 6efda1e018 Merge pull request #390 from Shirofune-Security/feat/364-shared-audit-profiles
Document shared versioned audit-policy profiles in changelogs
2026-09-19 14:55:51 +09:00
Zach Mathis (田中ザック) fbb84dc998 Merge pull request #391 from Shirofune-Security/feat/369-missing-audit-controls
Document six native audit controls in changelogs
2026-09-19 14:35:41 +09:00
田中ザック Isaac Mathis 27957e859f Merge pull request #392 from Shirofune-Security/fix/365-configuration-results
Verify configuration outcomes with dry-run and recovery journaling
2026-09-19 14:06:12 +09:00
Zach Mathis (田中ザック) 6fd86f21ce Merge pull request #389 from Shirofune-Security/fix/363-domain-ntlm-audit
Enable full domain NTLM auditing only on domain controllers
2026-09-19 13:13:01 +09:00
Shirofune-Security 966aa21a46 Enumerate corpus rules explicitly in PowerShell 5.1 fixtures 2026-09-19 04:40:13 +09:00
Shirofune-Security be3a354f18 Separate SMB policy verification from runtime activation 2026-09-19 04:39:55 +09:00
Shirofune-Security 70e6207a84 Match rule channel patterns consistently against concrete sources 2026-09-19 04:37:02 +09:00
Shirofune-Security 24a77ee9ce Read audit precedence provenance from documented RSoP schemas 2026-09-19 02:35:06 +09:00
Shirofune-Security 374b931676 Link SMB audit changelog entries to PR 397 2026-09-19 02:33:57 +09:00
Shirofune-Security a10e1d6e84 Reject firewall log path drift before configuration 2026-09-19 02:33:53 +09:00
Shirofune-Security 2ea509700b Add version-aware opt-in SMB audit policy controls 2026-09-19 02:33:13 +09:00
Shirofune-Security 6f1ad9d93b Verify safe HTML evidence across PowerShell JSON encoders 2026-09-19 02:33:12 +09:00
Shirofune-Security 88c84fa3c5 Link event-log changelog entries to PR 396 2026-09-19 02:31:39 +09:00
Shirofune-Security 0486cbe019 Link native provider changelog entries to PR 395 2026-09-19 02:31:01 +09:00
Shirofune-Security d29ffdd01b Unify event-log size and retention profiles with verified configuration 2026-09-19 02:30:41 +09:00
Shirofune-Security c4c7a33962 Assess native channels and provider prerequisites without static enabled claims 2026-09-19 02:29:56 +09:00
Shirofune-Security 84f263ed1f Link firewall logging release notes to PR 394 2026-09-19 02:25:41 +09:00
Shirofune-Security fbe8f95117 Add opt-in native firewall text logging controls 2026-09-19 02:24:38 +09:00
Shirofune-Security 007f7653b9 Link audit precedence release notes to PR 393 2026-09-19 02:23:10 +09:00
Shirofune-Security 1a12220b51 Verify advanced audit precedence before applying subcategories 2026-09-19 02:21:55 +09:00
Shirofune-Security 610dd92905 Document outgoing NTLM audit behavior in changelogs 2026-09-19 02:04:59 +09:00
Shirofune-Security e4266424c7 Document shared versioned audit-policy profiles in changelogs 2026-09-19 01:45:21 +09:00
Shirofune-Security 27cb050be7 Document six native audit controls in changelogs 2026-09-19 01:27:57 +09:00