CSEC_PUBLIC/WELA
1
0 Fork 0
mirror of https://github.com/Yamato-Security/WELA.git synced 2026-10-05 05:54:47 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
443153353507e40deb0d1234557dff792af216f1
WELA/scripts
T
History
田中ザック Isaac Mathis 4431533535 Collect native 4688 validation components with a fixed benign probe (#413) 
* Add opt-in native 4688 validation component collector

* Link native validation changelog to PR 413

* Reject contradictory native probe context observations

* Resolve probe artifact paths against the PowerShell location
2026-09-20 18:08:34 +09:00
..
AdObjectSacl.ps1
Isolate unknown dMSA prerequisites from other AD audit classes
2026-09-19 06:20:41 +09:00
AppLockerReadiness.ps1
Handle unused AppLocker placeholders without weakening merge enforcement guards
2026-09-19 06:25:36 +09:00
AuditIntegrity.ps1
Add source-specific Windows audit privilege and integrity controls (#412)
2026-09-20 14:03:18 +09:00
AuditIntegrityNative.cs
Add source-specific Windows audit privilege and integrity controls (#412)
2026-09-20 14:03:18 +09:00
AuditNotifications.ps1
Add OneSettings auditing and Security warning controls (#408)
2026-09-20 13:55:24 +09:00
Configuration.ps1
Add source-specific Windows audit privilege and integrity controls (#412)
2026-09-20 14:03:18 +09:00
ControlApplicability.ps1
Gate historical controls and require evidence for Windows defaults (#409)
2026-09-20 14:00:10 +09:00
EventLogConfiguration.ps1
Unify event-log size and retention profiles with verified configuration
2026-09-19 02:30:41 +09:00
FirewallLogging.ps1
Reject firewall log path drift before configuration
2026-09-19 02:33:53 +09:00
LdapDiagnostics.ps1
Make LDAP 1644 diagnostics explicit and preserve existing DC settings
2026-09-19 07:09:07 +09:00
NativeChannelConfiguration.ps1
Add OneSettings auditing and Security warning controls (#408)
2026-09-20 13:55:24 +09:00
NativeProviderPacks.ps1
Add opt-in native DNS and provider audit packs (#411)
2026-09-20 13:58:49 +09:00
NativeValidation.ps1
Collect native 4688 validation components with a fixed benign probe (#413)
2026-09-20 18:08:34 +09:00
PowerShellTranscription.ps1
Add opt-in Windows PowerShell transcription for CIS Level 2
2026-09-19 07:09:33 +09:00
RetentionHealth.ps1
Report native log retention and collection health evidence (#410)
2026-09-20 14:01:43 +09:00
Review-AuditCatalog.ps1
Correct legacy token audit GUID and validate catalog mapping uncertainty
2026-09-19 07:01:50 +09:00
SmbAuditing.ps1
Separate SMB policy verification from runtime activation
2026-09-19 04:39:55 +09:00
TargetedSaclPlanning.ps1
Preserve configured user-file suffixes in SACL plans
2026-09-19 06:21:18 +09:00
WefDeployment.ps1
Normalize WEF XML evidence before PowerShell 5.1 JSON serialization
2026-09-19 07:31:23 +09:00
WmiNamespaceAuditing.ps1
Restrict native WMI writes to SACL and verify privilege cleanup
2026-09-19 05:41:08 +09:00