Shirofune-SecurityandClaude Opus 4.8 31aeeda768 configure-sacl: cover per-user objects across all profiles + Default ...

Enumerate every user profile from ProfileList (plus C:\Users\Default so future
users inherit the SACL) and apply per-user SACLs:
- user_files: file SACL under each profile dir (Startup folder, Signal AppData).
- user_registry: registry SACL on each user hive - loaded hives via
  HKEY_USERS\<SID> directly, offline/Default hives by reg-load/unload of
  NTUSER.DAT (HKCU Run/RunOnce, User Shell Folders, StartupApproved, Load/Run,
  Command Processor AutoRun, Control Panel\Desktop screensaver, Environment
  logon script, LangBarAddin, Outlook Addins).
Handles are released ([gc]) before reg unload; objects/hives absent on the host
are skipped. Not covered: folder-redirected AppData on network shares, mandatory
profiles.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01MVUmXZBkr5FnZ2hwFkDhx7

2026-09-17 22:03:24 +09:00

..

audit_sacl_targets.json

configure-sacl: cover per-user objects across all profiles + Default

2026-09-17 22:03:24 +09:00

baselines.json

feat: update baselines.json to change currentSetting type to channel and specify DFSN-Server Admin

2026-09-01 23:39:47 +09:00

eid_subcategory_mapping.csv

update

2025-03-10 18:36:30 +09:00

security_rules.json

Sigma Rule Update (2026-09-01 22:29:49) (#359)

2026-09-01 22:29:56 +00:00