Commit Graph

Select branches

Hide Pull Requests

attack/auto-remap-update-1793653743

dev

feat/382-retention-closure

feat/383-ldap-closure

feat/384-audit-integrity-closure

feat/385-applicability-closure

feat/386-provider-packs-closure

main

rules/auto-sigma-update-1780353268

rules/auto-sigma-update-1782942060

rules/auto-sigma-update-1785617990

rules/auto-sigma-update-1788301790

rules/auto-sigma-update-1790898493

rules/auto-sigma-update-1793563799

#102

#103

#104

#105

#106

#107

#108

#109

#110

#111

#112

#113

#115

#116

#117

#118

#119

#120

#121

#122

#123

#124

#125

#126

#127

#128

#129

#130

#131

#132

#133

#134

#136

#137

#138

#139

#140

#142

#143

#144

#145

#146

#147

#148

#149

#150

#151

#152

#153

#154

#155

#157

#158

#159

#16

#160

#162

#163

#164

#165

#166

#167

#168

#169

#17

#170

#171

#172

#173

#174

#175

#176

#177

#178

#179

#180

#181

#182

#183

#184

#186

#187

#188

#189

#190

#191

#192

#193

#194

#195

#196

#197

#198

#199

#200

#201

#202

#203

#204

#205

#206

#207

#208

#209

#21

#210

#211

#212

#213

#214

#215

#216

#217

#218

#219

#220

#221

#222

#223

#224

#225

#226

#227

#228

#229

#23

#230

#231

#232

#233

#233/merge

#234

#235

#236

#237

#238

#239

#24

#240

#241

#242

#244

#245

#246

#247

#248

#249

#25

#250

#251

#252

#253

#254

#255

#256

#257

#258

#259

#26

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#27

#270

#271

#272

#273

#274

#275

#276

#277

#278

#279

#28

#280

#281

#282

#283

#284

#285

#286

#287

#288

#289

#29

#290

#291

#292

#293

#294

#295

#296

#297

#298

#299

#30

#300

#301

#302

#303

#304

#305

#306

#307

#308

#309

#31

#310

#311

#312

#313

#314

#315

#316

#317

#318

#319

#32

#320

#321

#322

#323

#324

#325

#326

#327

#328

#329

#33

#330

#331

#332

#333

#334

#335

#336

#337

#338

#339

#34

#340

#341

#342

#343

#344

#345

#346

#347

#348

#349

#35

#350

#351

#352

#353

#354

#355

#356

#357

#358

#359

#36

#360

#361

#37

#38

#388

#389

#39

#390

#391

#392

#393

#394

#395

#396

#397

#398

#399

#40

#400

#401

#402

#403

#404

#405

#406

#407

#408

#409

#41

#410

#411

#412

#413

#414

#415

#416

#417

#418

#419

#42

#420

#421

#422

#423

#424

#425

#426

#427

#428

#429

#43

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#440

#441

#442

#443

#444

#445

#446

#447

#448

#449

#45

#450

#451

#452

#453

#454

#455

#456

#457

#458

#459

#46

#460

#461

#462

#463

#464

#465

#466

#467

#468

#469

#47

#470

#471

#472

#473

#474

#475

#476

#477

#478

#479

#48

#480

#481

#482

#483

#484

#485

#486

#487

#488

#489

#49

#496

#496/merge

#497

#497/merge

#498

#498/merge

#499

#499/merge

#50

#500

#500/merge

#501

#501/merge

#503

#504

#505

#506

#507

#507/merge

#51

#53

#54

#56

#57

#58

#59

#60

#63

#64

#65

#66

#67

#68

#69

#70

#71

#72

#73

#74

#76

#77

#78

#79

#79/merge

#80

#81

#82

#83

#84

#85

#86

#87

#88

#89

#90

#91

#92

#93

#94

#95

#96

#97

#98

v1.0.0

v2.0.0

v2.1.0

Mono Color

• 9caf23aff8 Verify actual SMB audit runtime observations separately from preserved security settings Shirofune-Security 2026-09-22 10:11:09 +09:00
• 530b49f26b feat: checkpoint reviewed native registry SACL recovery Shirofune-Security 2026-09-22 10:11:02 +09:00
• b61a3c6bca Handle native WinRM manifest IDs without Int32 overflow Shirofune-Security 2026-09-22 10:10:01 +09:00
• 0777a5d0f8 Add scoped outgoing NTLM audit configuration with native acceptance Shirofune-Security 2026-09-22 10:09:37 +09:00
• af88b87e01 Fix native collector subscription inventory and Unicode readback Shirofune-Security 2026-09-22 09:46:28 +09:00
• f403521068 Merge commit '03039cb1c653f75cc0052ed93c7699290873058e' into test/386-native-provider-configure Shirofune-Security 2026-09-22 09:41:21 +09:00
• 558ba6f2a8 Verify public SMB audit policy configuration on native Windows Shirofune-Security 2026-09-22 09:41:04 +09:00
• 8af856ffa6 Validate public provider pack configuration on native Windows Shirofune-Security 2026-09-22 09:40:56 +09:00
• 03039cb1c6 Merge commit 'ac45e8f72fead44765db26d4b543c60776e9fba0' into test/378-native-security-warning Shirofune-Security 2026-09-22 09:35:07 +09:00
• ac45e8f72f Merge commit 'dc7867b6bc1193e3b5d54a9c7368c0647c39b663' into test/373-native-registry-sacl-lifecycle Shirofune-Security 2026-09-22 09:35:07 +09:00
• dc7867b6bc Merge commit 'ffe4ed473414438d5465156e15b62796393daf80' into feat/368-reviewed-wec-authorization Shirofune-Security 2026-09-22 09:35:07 +09:00
• ffe4ed4734 Merge remote-tracking branch 'origin/dev' into feat/367-reviewed-channel-recovery Shirofune-Security 2026-09-22 09:33:52 +09:00
• d20b240611 Merge pull request #453 from Shirofune-Security/test/364-native-profile-configuration 田中ザック Isaac Mathis 2026-09-22 09:33:42 +09:00
• 0d7bfd1317 test: consume valid review for native prerequisite refusal and harden cleanup Shirofune-Security 2026-09-22 08:17:10 +09:00
• 59a83a20cc Fix WEC variant decoding and native authorization fixture Shirofune-Security 2026-09-22 08:08:17 +09:00
• 79ee4da4dd Read registry descriptor from the owned native handle across both engines Shirofune-Security 2026-09-22 08:07:36 +09:00
• 9238633041 test: run registry fixtures in explicit native shells and document evidence Shirofune-Security 2026-09-22 08:06:51 +09:00
• 806e979ede Accept genuine native channel snapshot size and provider representation Shirofune-Security 2026-09-22 08:02:36 +09:00
• 61f5fd1688 Merge remote-tracking branch 'origin/dev' into feat/368-reviewed-wec-authorization Shirofune-Security 2026-09-22 08:02:06 +09:00
• e57701b22f Merge remote-tracking branch 'origin/dev' into test/373-native-registry-sacl-lifecycle Shirofune-Security 2026-09-22 08:01:48 +09:00
• a62c3b7def test: exercise public registry SACL lifecycle and native4657 Shirofune-Security 2026-09-22 08:01:48 +09:00
• 07acf9c1c2 Merge remote-tracking branch 'origin/dev' into feat/367-reviewed-channel-recovery Shirofune-Security 2026-09-22 08:01:06 +09:00
• 6bbfa8b65e Use owned registry handles in Windows warning acceptance fixture Shirofune-Security 2026-09-22 08:00:53 +09:00
• 197306b523 Preserve independent cleanup attempts and record actual native host context Shirofune-Security 2026-09-22 08:00:52 +09:00
• c223d536cc Merge pull request #452 from Shirofune-Security/feat/368-reviewed-wec-listener 田中ザック Isaac Mathis 2026-09-22 07:59:54 +09:00
• 1c0ac4b470 Merge pull request #451 from Shirofune-Security/feat/373-native-file-access-probe 田中ザック Isaac Mathis 2026-09-22 07:59:47 +09:00
• c0e70b5728 Merge pull request #450 from Shirofune-Security/feat/381-native-applocker-script-probe 田中ザック Isaac Mathis 2026-09-22 07:59:40 +09:00
• fd24c4948a Merge pull request #448 from Shirofune-Security/fix/365-reject-unbound-cli-arguments 田中ザック Isaac Mathis 2026-09-22 07:59:34 +09:00
• ef2f07f0c6 Reject final-write drift in original or retained recovery evidence Shirofune-Security 2026-09-22 07:59:16 +09:00
• 0ff81052e6 Merge commit '39e8ce1' into feat/367-reviewed-channel-recovery Shirofune-Security 2026-09-22 07:53:01 +09:00
• 0c51232a40 Add reviewed recovery of one completed native channel operation Shirofune-Security 2026-09-22 07:52:16 +09:00
• 0051f8c662 Review and update only source SID authorization on disabled WEC subscriptions Shirofune-Security 2026-09-22 07:50:50 +09:00
• b92c044dd9 Verify public Security warning policy configuration on native Windows Shirofune-Security 2026-09-22 07:50:09 +09:00
• 9a4a3fca95 Exercise public profile configuration against native audit policy Shirofune-Security 2026-09-22 07:41:18 +09:00
• 99cd1ea492 Merge commit '39e8ce1' into test/373-native-registry-sacl-lifecycle Shirofune-Security 2026-09-22 07:29:23 +09:00
• 021ebecc62 Checkpoint an owned mounted hive through the public SACL catalog Shirofune-Security 2026-09-22 07:29:23 +09:00
• 39e8ce1d70 Resolve combined native source line-ending attributes Shirofune-Security 2026-09-22 07:25:54 +09:00
• 0d1adfb442 Integrate reviewed CLI, channel and native probe changes Shirofune-Security 2026-09-22 07:25:37 +09:00
• c89a21f81b Integrate reviewed CLI, channels and AppLocker Script probe Shirofune-Security 2026-09-22 07:24:32 +09:00
• f3bd83a521 Integrate reviewed CLI and native channel configuration changes Shirofune-Security 2026-09-22 07:23:48 +09:00
• 6365402f16 Clarify unsupported common parameters and integrate native channel tests Shirofune-Security 2026-09-22 07:21:55 +09:00
• 52e09638ad Merge pull request #449 from Shirofune-Security/test/367-native-channel-configuration 田中ザック Isaac Mathis 2026-09-22 07:21:08 +09:00
• 8bd7aa0c74 Verify effective native worker module path and complete fixture exit status Shirofune-Security 2026-09-21 23:07:16 +09:00
• 2301bf1e85 Bind native listener adapter modules and normalize cross-engine context JSON Shirofune-Security 2026-09-21 23:03:17 +09:00
• 3e9ba8c403 Create one reviewed exact-IP collector listener through a bounded native adapter Shirofune-Security 2026-09-21 22:58:08 +09:00
• ee254e6c54 Merge remote-tracking branch 'origin/dev' into feat/368-reviewed-wec-listener Shirofune-Security 2026-09-21 22:57:53 +09:00
• d832b1e090 Measure held-readback phase and refuse implementation targets before hashing Shirofune-Security 2026-09-21 22:51:50 +09:00
• 03bc63e996 Respect inherited execution policy for the fixed file worker Shirofune-Security 2026-09-21 22:43:07 +09:00
• ce7b49a5ac Bind observed native file paths and document exact read evidence Shirofune-Security 2026-09-21 22:40:50 +09:00
• 4905f82eb5 Add reviewed WEC listener CLI contract and operator guide Shirofune-Security 2026-09-21 22:40:05 +09:00
• dc4360a886 Merge branch 'feat/375-firewall-log-recovery' into feat/373-native-file-access-probe Shirofune-Security 2026-09-21 22:38:41 +09:00
• eb1b9989a1 Load the service enum for isolated Windows PowerShell fixtures Shirofune-Security 2026-09-21 22:38:22 +09:00
• 506333c501 Use a fixed native Windows PowerShell 5.1 listener adapter Shirofune-Security 2026-09-21 22:36:15 +09:00
• 7d4d582852 Merge pull request #447 from Shirofune-Security/feat/375-firewall-log-recovery 田中ザック Isaac Mathis 2026-09-21 22:35:10 +09:00
• fa1190e12c Merge pull request #446 from Shirofune-Security/feat/386-native-capi2-probe 田中ザック Isaac Mathis 2026-09-21 22:34:41 +09:00
• 37e93e10eb Refuse stopped service dependencies before AppLocker CIM observation Shirofune-Security 2026-09-21 22:34:09 +09:00
• 0ae8c00443 Merge pull request #443 from Shirofune-Security/feat/376-transcription-recovery 田中ザック Isaac Mathis 2026-09-21 22:30:25 +09:00
• c1aaa693ac Pass explicit held listener XML through the typed native cmdlet Shirofune-Security 2026-09-21 22:30:13 +09:00
• bfbdc6c476 Read the owned release pipe with encoding-preamble detection Shirofune-Security 2026-09-21 22:29:03 +09:00
• 4f653c5185 Record merged dev ancestry without changing the reviewed tree Shirofune-Security 2026-09-21 22:28:49 +09:00
• 019f13b566 Merge branch 'feat/375-firewall-log-recovery' into feat/381-native-applocker-script-probe Shirofune-Security 2026-09-21 22:27:49 +09:00
• a61181e860 Checkpoint exact native one-byte file access probe Shirofune-Security 2026-09-21 22:27:26 +09:00
• 25fa7200a0 Checkpoint native local WSMan create with fixed listener XML Shirofune-Security 2026-09-21 22:27:05 +09:00
• ef64b08bd2 Document Script evidence boundaries and retain bounded startup diagnostics Shirofune-Security 2026-09-21 22:26:34 +09:00
• 29bdc908c5 Integrate the reviewed native recovery and probe batch Shirofune-Security 2026-09-21 22:26:32 +09:00
• f05f852286 Retain native channel preservation evidence and document acceptance limits Shirofune-Security 2026-09-21 22:26:15 +09:00
• d0973a832d Integrate reviewed native probes and recovery commands Shirofune-Security 2026-09-21 22:25:37 +09:00
• 3919ba5d4a Document supported CLI preview options Shirofune-Security 2026-09-21 22:25:02 +09:00
• 72c2d14046 Merge branch 'feat/375-firewall-log-recovery' into feat/368-reviewed-wec-listener Shirofune-Security 2026-09-21 22:24:50 +09:00
• 7bfd8f65a6 Add reviewed event-log size and retention recovery (#445) 田中ザック Isaac Mathis 2026-09-21 22:24:21 +09:00
• 8fed328442 Integrate the reviewed recovery and native probe batch Shirofune-Security 2026-09-21 22:23:25 +09:00
• b018135e73 Use canonical WSMan listener resource URI across PowerShell engines Shirofune-Security 2026-09-21 22:22:50 +09:00
• 8ac4c45653 Add fixed native AppLocker Script probe and disposable evidence matrix Shirofune-Security 2026-09-21 22:22:21 +09:00
• cba6162cb5 Compare configured channel XML with explicit enabled-field allowance Shirofune-Security 2026-09-21 22:22:20 +09:00
• 2f442af4da Integrate reviewed recovery and failed-logon commands Shirofune-Security 2026-09-21 22:21:35 +09:00
• c4e9e765ff Integrate reviewed event-log recovery and failed-logon changes Shirofune-Security 2026-09-21 22:20:02 +09:00
• b9a6534424 Exercise public channel configuration on disposable Windows Shirofune-Security 2026-09-21 22:18:35 +09:00
• 4df3bb4c79 Reject unknown CLI arguments before legacy command dispatch Shirofune-Security 2026-09-21 22:16:44 +09:00
• 504e36c15e Checkpoint exact-IP WinRM listener creation on native Windows Shirofune-Security 2026-09-21 22:14:53 +09:00
• 89f520511b Merge dev after failed-logon probe integration Shirofune-Security 2026-09-21 22:13:52 +09:00
• 6d228fedef Add a native local failed-logon audit probe (#444) 田中ザック Isaac Mathis 2026-09-21 22:13:20 +09:00
• ab69ce3c4b Explain disabled transcription after interrupted recovery Shirofune-Security 2026-09-21 22:09:06 +09:00
• 2d208f457a Refuse unknown recovery options before native restoration Shirofune-Security 2026-09-21 18:24:06 +09:00
• dc1e354475 Reject unbound preview and positional probe arguments Shirofune-Security 2026-09-21 18:23:54 +09:00
• 6980657337 Reject unbound recovery options before command dispatch Shirofune-Security 2026-09-21 18:23:53 +09:00
• 6bf4360362 Merge final dev and verify strict transcription recovery CLI Shirofune-Security 2026-09-21 18:22:31 +09:00
• 9bc243a041 Integrate final reviewed development base for CAPI2 probe Shirofune-Security 2026-09-21 18:21:10 +09:00
• e61056caba Merge final dev and preserve recovery and ingress command handlers Shirofune-Security 2026-09-21 18:21:06 +09:00
• 3abe3018ba Merge branch 'dev' of https://github.com/Yamato-Security/WELA into feat/375-firewall-log-recovery Shirofune-Security 2026-09-21 18:20:57 +09:00
• 22d3a13180 Reject coerced transcription recovery history discriminators Shirofune-Security 2026-09-21 18:19:57 +09:00
• 203fdfc942 Add reviewed scoped collector firewall ingress creation (#442) 田中ザック Isaac Mathis 2026-09-21 18:19:30 +09:00
• fa720f1454 Bind the reviewed native host gate and context dependency Shirofune-Security 2026-09-21 18:17:23 +09:00
• 6c6edc7a68 Preserve supported UTC timestamp parsing in recovery history Shirofune-Security 2026-09-21 18:15:45 +09:00
• e4e60684ac Verify stopped providers are refused before connecting Shirofune-Security 2026-09-21 18:15:30 +09:00
• 83ab9c8752 Require running firewall providers before recovery observations Shirofune-Security 2026-09-21 18:15:02 +09:00
• 3ee0d7b6bd Require typed completion and identity fields in recovery evidence Shirofune-Security 2026-09-21 18:14:13 +09:00
• e068bd8f52 Merge dev and preserve independent recovery and WEC commands Shirofune-Security 2026-09-21 18:11:29 +09:00
• dd950c7358 Reject boolean coercion in completed recovery evidence Shirofune-Security 2026-09-21 18:11:21 +09:00
• ec21453cf2 Bind strict receipt parser into CAPI2 source evidence Shirofune-Security 2026-09-21 18:11:13 +09:00
• 07e3d37265 Merge branch 'dev' of https://github.com/Yamato-Security/WELA into feat/375-firewall-log-recovery Shirofune-Security 2026-09-21 18:09:42 +09:00