田中ザック Isaac Mathis 38a392f3d6 Export and verify recovery of native probe events from EVTX (#420) ...

* Export and recover exact native probe events from EVTX

* Link changelog to PR 420

* Make EVTX duplicate JSON fixture portable to PowerShell 5.1

2026-09-20 19:33:20 +09:00

..

EvtxRecovery.Fixture.ps1

Export and verify recovery of native probe events from EVTX (#420)

2026-09-20 19:33:20 +09:00

intune-audit-ddf-facts.json

Export native audit profiles for reviewed Intune client policies (#414)

2026-09-20 18:10:52 +09:00

WefArrival.Fixture.ps1

Verify native probe arrival in the local WEF collector (#418)

2026-09-20 19:26:57 +09:00

wmi-namespace-descriptor.json

Add opt-in WMI namespace audit SACL workflow

2026-09-19 05:30:12 +09:00