Commit Graph

Select branches

Hide Pull Requests

attack/auto-remap-update-1793653743

dev

feat/382-retention-closure

feat/383-ldap-closure

feat/384-audit-integrity-closure

feat/385-applicability-closure

feat/386-provider-packs-closure

main

rules/auto-sigma-update-1780353268

rules/auto-sigma-update-1782942060

rules/auto-sigma-update-1785617990

rules/auto-sigma-update-1788301790

rules/auto-sigma-update-1790898493

rules/auto-sigma-update-1793563799

#102

#103

#104

#105

#106

#107

#108

#109

#110

#111

#112

#113

#115

#116

#117

#118

#119

#120

#121

#122

#123

#124

#125

#126

#127

#128

#129

#130

#131

#132

#133

#134

#136

#137

#138

#139

#140

#142

#143

#144

#145

#146

#147

#148

#149

#150

#151

#152

#153

#154

#155

#157

#158

#159

#16

#160

#162

#163

#164

#165

#166

#167

#168

#169

#17

#170

#171

#172

#173

#174

#175

#176

#177

#178

#179

#180

#181

#182

#183

#184

#186

#187

#188

#189

#190

#191

#192

#193

#194

#195

#196

#197

#198

#199

#200

#201

#202

#203

#204

#205

#206

#207

#208

#209

#21

#210

#211

#212

#213

#214

#215

#216

#217

#218

#219

#220

#221

#222

#223

#224

#225

#226

#227

#228

#229

#23

#230

#231

#232

#233

#233/merge

#234

#235

#236

#237

#238

#239

#24

#240

#241

#242

#244

#245

#246

#247

#248

#249

#25

#250

#251

#252

#253

#254

#255

#256

#257

#258

#259

#26

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#27

#270

#271

#272

#273

#274

#275

#276

#277

#278

#279

#28

#280

#281

#282

#283

#284

#285

#286

#287

#288

#289

#29

#290

#291

#292

#293

#294

#295

#296

#297

#298

#299

#30

#300

#301

#302

#303

#304

#305

#306

#307

#308

#309

#31

#310

#311

#312

#313

#314

#315

#316

#317

#318

#319

#32

#320

#321

#322

#323

#324

#325

#326

#327

#328

#329

#33

#330

#331

#332

#333

#334

#335

#336

#337

#338

#339

#34

#340

#341

#342

#343

#344

#345

#346

#347

#348

#349

#35

#350

#351

#352

#353

#354

#355

#356

#357

#358

#359

#36

#360

#361

#37

#38

#388

#389

#39

#390

#391

#392

#393

#394

#395

#396

#397

#398

#399

#40

#400

#401

#402

#403

#404

#405

#406

#407

#408

#409

#41

#410

#411

#412

#413

#414

#415

#416

#417

#418

#419

#42

#420

#421

#422

#423

#424

#425

#426

#427

#428

#429

#43

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#440

#441

#442

#443

#444

#445

#446

#447

#448

#449

#45

#450

#451

#452

#453

#454

#455

#456

#457

#458

#459

#46

#460

#461

#462

#463

#464

#465

#466

#467

#468

#469

#47

#470

#471

#472

#473

#474

#475

#476

#477

#478

#479

#48

#480

#481

#482

#483

#484

#485

#486

#487

#488

#489

#49

#496

#496/merge

#497

#497/merge

#498

#498/merge

#499

#499/merge

#50

#500

#500/merge

#501

#501/merge

#503

#504

#505

#506

#507

#507/merge

#51

#53

#54

#56

#57

#58

#59

#60

#63

#64

#65

#66

#67

#68

#69

#70

#71

#72

#73

#74

#76

#77

#78

#79

#79/merge

#80

#81

#82

#83

#84

#85

#86

#87

#88

#89

#90

#91

#92

#93

#94

#95

#96

#97

#98

v1.0.0

v2.0.0

v2.1.0

Mono Color

• fb0a424da8 Reject scoped logging changes that overflow bounded policy inventories Shirofune-Security 2026-09-22 15:19:20 +09:00
• 4eabfe329c Merge pull request #436 from Shirofune-Security/feat/376-current-token-transcript 田中ザック Isaac Mathis 2026-09-22 15:14:12 +09:00
• bbedaab966 Merge pull request #437 from Shirofune-Security/feat/373-file-sacl-recovery 田中ザック Isaac Mathis 2026-09-22 15:14:06 +09:00
• fcb57f1887 Merge pull request #435 from Shirofune-Security/feat/365-named-registry-recovery 田中ザック Isaac Mathis 2026-09-22 15:14:00 +09:00
• 9bc98d4439 Merge pull request #434 from Shirofune-Security/feat/386-native-dns-client-probe 田中ザック Isaac Mathis 2026-09-22 15:13:54 +09:00
• e9dc90e39a Merge pull request #433 from Shirofune-Security/feat/382-native-evtx-reader 田中ザック Isaac Mathis 2026-09-22 15:11:59 +09:00
• e93ea3e7ea Merge pull request #467 from Shirofune-Security/feat/380-native-token-right-probe 田中ザック Isaac Mathis 2026-09-22 15:11:28 +09:00
• a4c17bb814 Merge pull request #466 from Shirofune-Security/test/378-native-onesettings-configure 田中ザック Isaac Mathis 2026-09-22 15:11:24 +09:00
• 65831b747b Merge pull request #465 from Shirofune-Security/feat/363-scoped-ntlm-auditing 田中ザック Isaac Mathis 2026-09-22 15:09:31 +09:00
• 66162232b6 Integrate reviewed logging and recovery base for WMI tree safeguards Shirofune-Security 2026-09-22 15:08:52 +09:00
• 81c01330b8 Merge final reviewed dev sources and preserve literal CLI arguments Shirofune-Security 2026-09-22 15:08:26 +09:00
• 7e1b076254 Integrate approved dev command and recovery additions Shirofune-Security 2026-09-22 15:07:44 +09:00
• 2b992f06e6 Integrate approved dev command and recovery additions Shirofune-Security 2026-09-22 15:07:20 +09:00
• bfa286bf7d Integrate reviewed WMI recovery with combined dev auditing batch Shirofune-Security 2026-09-22 15:06:51 +09:00
• e584345df3 Integrate approved native recovery PRs before dev merge Shirofune-Security 2026-09-22 15:05:40 +09:00
• 2b270042e7 Stack leaf-file recovery and preserve scoped NTLM dry-run integration Shirofune-Security 2026-09-22 15:03:17 +09:00
• 3c47442634 Stack named registry recovery on reviewed logging integration Shirofune-Security 2026-09-22 15:01:03 +09:00
• 16f9e69844 Stack native DNS probe on intended-reader recovery and approved dev Shirofune-Security 2026-09-22 14:59:41 +09:00
• d72bf939a7 Reserve registry probe capacity and isolate exact-value cleanup Shirofune-Security 2026-09-22 14:59:21 +09:00
• d5de556f74 Retain partial WMI tree observations after a parent write Shirofune-Security 2026-09-22 14:58:07 +09:00
• 4ab4c275a5 Preserve positional bindings and propagate native fixture failures Shirofune-Security 2026-09-22 14:57:47 +09:00
• 1dfd3a92b9 Stack intended-reader EVTX recovery on the approved native auditing batch Shirofune-Security 2026-09-22 14:56:09 +09:00
• 9575c8204d Add fixed current-user registry value audit probe Shirofune-Security 2026-09-22 14:55:12 +09:00
• 75c978b9a2 Preserve legacy positional CLI parameter bindings Shirofune-Security 2026-09-22 14:54:58 +09:00
• 5978665580 Merge pull request #464 from Shirofune-Security/feat/368-native-wef-query 田中ザック Isaac Mathis 2026-09-22 14:54:19 +09:00
• 488d179f09 Count the root in bounded WMI descriptor evidence Shirofune-Security 2026-09-22 14:49:07 +09:00
• adaf3f9681 Retain actual process identity for scoped logging and native attribution Shirofune-Security 2026-09-22 14:48:45 +09:00
• e34ede7c38 Require exact native inherited and protected subtree outcomes Shirofune-Security 2026-09-22 14:46:26 +09:00
• 8aee77cfea Bound unrelated command-line policy inventory Shirofune-Security 2026-09-22 14:46:25 +09:00
• 8546d319eb Reject unexplained descendant changes and unrelated WMI command arguments Shirofune-Security 2026-09-22 14:45:06 +09:00
• e419b073fe Document scoped PowerShell controls and align native evidence boundaries Shirofune-Security 2026-09-22 14:43:40 +09:00
• ab45d03f15 Add reviewed removal of one proven parent-only WMI audit ACE Shirofune-Security 2026-09-22 14:43:33 +09:00
• ddcdd8e2b8 Document bounded WMI tree guarantees and record native protection behavior Shirofune-Security 2026-09-22 14:40:25 +09:00
• 3f613ea19c Add scoped Windows PowerShell logging policy and native validation Shirofune-Security 2026-09-22 14:37:38 +09:00
• 036f51886a Exercise descendant drift and use supported workflow shell dispatch Shirofune-Security 2026-09-22 14:36:48 +09:00
• aa4630dda9 Add scoped native 4688 command-line policy configuration Shirofune-Security 2026-09-22 14:34:05 +09:00
• ea184e5e95 Guard WMI inheritance with bounded descendant observations Shirofune-Security 2026-09-22 14:33:54 +09:00
• b556b82ebc Integrate native DNS probe with current dev commands and release guides Shirofune-Security 2026-09-22 14:25:44 +09:00
• 3ba8a45d80 Integrate current native auditing commands with transcript verification Shirofune-Security 2026-09-22 14:24:29 +09:00
• 0ef22f20fa Merge dev and preserve leaf-file SACL recovery integration Shirofune-Security 2026-09-22 14:24:24 +09:00
• 4598bb36f7 Integrate current dev with intended-reader EVTX verification Shirofune-Security 2026-09-22 14:24:04 +09:00
• 397dfbf006 Merge dev and preserve named registry recovery integration Shirofune-Security 2026-09-22 14:23:55 +09:00
• 7ef29df61f Integrate reviewed native auditing batch and preserve 4703 validation Shirofune-Security 2026-09-22 14:23:44 +09:00
• 2fef35da23 Integrate reviewed native auditing commands with OneSettings validation Shirofune-Security 2026-09-22 14:23:33 +09:00
• 005b249c3b Integrate reviewed filesystem and WEF query changes with scoped NTLM auditing Shirofune-Security 2026-09-22 14:23:24 +09:00
• 34b7a775c4 Merge dev and preserve filesystem lifecycle and WEF query changes Shirofune-Security 2026-09-22 14:23:10 +09:00
• 015d56c92b Merge pull request #463 from Shirofune-Security/test/373-native-filesystem-sacl-lifecycle 田中ザック Isaac Mathis 2026-09-22 14:21:46 +09:00
• 4d34305097 test: bind token task metadata to the native publisher XML namespace Shirofune-Security 2026-09-22 12:44:51 +09:00
• 10c50b9a74 test: corroborate runtime token task and measure full native verification Shirofune-Security 2026-09-22 12:43:31 +09:00
• b5e244bb68 test: retain exact native publisher task metadata for attribution diagnosis Shirofune-Security 2026-09-22 12:40:04 +09:00
• 3fb0f8aa6c fix: decode native WEF XML independently of property count Shirofune-Security 2026-09-22 12:37:37 +09:00
• 160b573a99 test: bind native 4703 attribution to installed schema and exact restored context Shirofune-Security 2026-09-22 12:34:43 +09:00
• c96ae4541c test: retain precise native WEF XML boundary diagnostics Shirofune-Security 2026-09-22 12:33:44 +09:00
• 9692edcec6 fix: normalize native WEF reader tokens before strict validation Shirofune-Security 2026-09-22 12:30:51 +09:00
• 495f12a30f test: bound token attribution worker and retain independent cleanup evidence Shirofune-Security 2026-09-22 12:24:53 +09:00
• 5bebb9a7a5 test: isolate native 4703 audit attribution and retain query diagnostics Shirofune-Security 2026-09-22 12:22:21 +09:00
• f9c9281852 Merge remote-tracking branch 'origin/dev' into feat/380-native-token-right-probe Shirofune-Security 2026-09-22 12:21:00 +09:00
• 39ca39bf2e Merge remote-tracking branch 'origin/dev' into test/378-native-onesettings-configure Shirofune-Security 2026-09-22 12:19:05 +09:00
• 1dfb66fb40 Merge remote-tracking branch 'origin/dev' into feat/368-native-wef-query Shirofune-Security 2026-09-22 12:16:48 +09:00
• 8e295904ba Merge remote-tracking branch 'origin/dev' into feat/363-scoped-ntlm-auditing Shirofune-Security 2026-09-22 12:16:35 +09:00
• 656a20d620 Merge remote-tracking branch 'origin/dev' into test/373-native-filesystem-sacl-lifecycle Shirofune-Security 2026-09-22 12:16:22 +09:00
• c18f971420 Avoid owned user profile creation and verify native fixture inventories Shirofune-Security 2026-09-22 12:16:06 +09:00
• 0ebe99b390 Merge pull request #462 from Shirofune-Security/feat/373-registry-sacl-recovery 田中ザック Isaac Mathis 2026-09-22 12:15:46 +09:00
• 857e6b0b06 Merge pull request #461 from Shirofune-Security/test/377-native-smb-policy 田中ザック Isaac Mathis 2026-09-22 12:15:40 +09:00
• ad7ddf4de7 Handle native host casing and timestamp compatibility in query evidence Shirofune-Security 2026-09-22 12:14:05 +09:00
• bf40f3d856 test: compare actual Privacy buffer readback after native rounding Shirofune-Security 2026-09-22 12:10:46 +09:00
• f27238ebd5 Validate typed source inputs and preserve caller scope in query reader Shirofune-Security 2026-09-22 12:10:03 +09:00
• 6f713e7497 fix: require running WMI before scoped NTLM observations Shirofune-Security 2026-09-22 12:06:11 +09:00
• 353159615e fix: preserve omitted notification selection and document native OneSettings acceptance Shirofune-Security 2026-09-22 12:06:07 +09:00
• 9720ad7886 Merge pull request #460 from Shirofune-Security/feat/362-scoped-outgoing-ntlm 田中ザック Isaac Mathis 2026-09-22 12:03:49 +09:00
• 35ea5b87ef Merge pull request #459 from Shirofune-Security/fix/368-native-collector-observation 田中ザック Isaac Mathis 2026-09-22 12:03:46 +09:00
• f87ce48206 test: exercise public OneSettings policy and Privacy channel configuration Shirofune-Security 2026-09-22 12:03:18 +09:00
• b162c4e598 feat: configure selected incoming and domain NTLM audit policies Shirofune-Security 2026-09-22 12:03:11 +09:00
• 54f9d6bf51 Add bounded native preflight for one selected WEF QueryList Shirofune-Security 2026-09-22 12:00:26 +09:00
• 6feb0d8a33 test: complete filesystem lifecycle fixture dependencies and evidence guide Shirofune-Security 2026-09-22 11:59:29 +09:00
• 7136dadeac test: measure fixed already-enabled debug privilege adjustment Shirofune-Security 2026-09-22 11:59:26 +09:00
• 8496b86b88 test: exercise public redirected filesystem SACL lifecycle and native4663 Shirofune-Security 2026-09-22 11:54:37 +09:00
• cd65133fc4 test: verify fixed native token privilege adjustment feasibility Shirofune-Security 2026-09-22 11:51:31 +09:00
• 0f95115908 test: establish owned redirected-profile native SACL fixture Shirofune-Security 2026-09-22 11:49:31 +09:00
• 70a812556d Merge commit '29f03e352823af81b35869659928a94e70df4cf9' into feat/373-registry-sacl-recovery Shirofune-Security 2026-09-22 11:43:28 +09:00
• 29f03e3528 Merge commit '559a9d1b8234f11642ba0ca4ea4a93b048bbd15f' into test/377-native-smb-policy Shirofune-Security 2026-09-22 11:42:50 +09:00
• 559a9d1b82 Merge commit '008a8c80b9820318be8d9f833c6adf31c2dbf9a9' into feat/362-scoped-outgoing-ntlm Shirofune-Security 2026-09-22 11:42:30 +09:00
• 008a8c80b9 Merge remote-tracking branch 'origin/dev' into fix/368-native-collector-observation Shirofune-Security 2026-09-22 11:42:00 +09:00
• cd0f566b7e Merge pull request #458 from Shirofune-Security/test/386-native-provider-configure 田中ザック Isaac Mathis 2026-09-22 11:41:17 +09:00
• 9f2dad6e20 test: retain native registry separators in isolated child scenario Shirofune-Security 2026-09-22 11:03:48 +09:00
• 494f9c2f93 fix: accept exact native empty catalog representations and document recovery Shirofune-Security 2026-09-22 11:01:38 +09:00
• 7a29bdc2b2 Merge remote-tracking branch 'origin/dev' into feat/373-registry-sacl-recovery Shirofune-Security 2026-09-22 10:57:17 +09:00
• 314d25e6a2 fix: validate native empty catalogue and exercise registry recovery refusals Shirofune-Security 2026-09-22 10:57:17 +09:00
• 8639bbd750 Pass literal named switches in negative public provider cases Shirofune-Security 2026-09-22 10:23:04 +09:00
• 180ecaddbf Use explicit supported shells for native collector smoke Shirofune-Security 2026-09-22 10:22:44 +09:00
• 43e5479fbc Retain independent cleanup snapshots and exercise native read-only smoke Shirofune-Security 2026-09-22 10:15:48 +09:00
• 4d2a284a3c Merge remote-tracking branch 'origin/dev' into fix/368-native-collector-observation Shirofune-Security 2026-09-22 10:15:48 +09:00
• a483ba3135 Merge remote-tracking branch 'origin/dev' into test/377-native-smb-policy Shirofune-Security 2026-09-22 10:15:39 +09:00
• 36d8acf23e Merge remote-tracking branch 'origin/dev' into feat/362-scoped-outgoing-ntlm Shirofune-Security 2026-09-22 10:15:37 +09:00
• c1971d8c04 Merge remote-tracking branch 'origin/dev' into test/386-native-provider-configure Shirofune-Security 2026-09-22 10:15:37 +09:00
• d167ff39a4 Retain independent native XML for provider configuration evidence Shirofune-Security 2026-09-22 10:15:37 +09:00
• 1c38448c8c Merge pull request #457 from Shirofune-Security/test/378-native-security-warning 田中ザック Isaac Mathis 2026-09-22 10:11:31 +09:00
• af28883f64 Merge pull request #456 from Shirofune-Security/test/373-native-registry-sacl-lifecycle 田中ザック Isaac Mathis 2026-09-22 10:11:25 +09:00
• 55df33e605 Merge pull request #455 from Shirofune-Security/feat/368-reviewed-wec-authorization 田中ザック Isaac Mathis 2026-09-22 10:11:18 +09:00
• c1e2d6fd97 Merge pull request #454 from Shirofune-Security/feat/367-reviewed-channel-recovery 田中ザック Isaac Mathis 2026-09-22 10:11:12 +09:00