田中ザック Isaac Mathis 55cc427c61 Report native log retention and collection health evidence (#410) ...

* Add read-only native retention and collection health evidence reports

* Verify retention HTML evidence across PowerShell JSON serializers

* Reference PR 410 in retention changelogs

* Preserve previous-report arrays on Windows PowerShell and test both server releases

2026-09-20 14:01:43 +09:00

..

AdObjectSacl.ps1

Isolate unknown dMSA prerequisites from other AD audit classes

2026-09-19 06:20:41 +09:00

AppLockerReadiness.ps1

Handle unused AppLocker placeholders without weakening merge enforcement guards

2026-09-19 06:25:36 +09:00

AuditNotifications.ps1

Add OneSettings auditing and Security warning controls (#408)

2026-09-20 13:55:24 +09:00

Configuration.ps1

Merge reviewed PowerShell transcription into WEF integration

2026-09-19 11:45:59 +09:00

ControlApplicability.ps1

Gate historical controls and require evidence for Windows defaults (#409)

2026-09-20 14:00:10 +09:00

EventLogConfiguration.ps1

Unify event-log size and retention profiles with verified configuration

2026-09-19 02:30:41 +09:00

FirewallLogging.ps1

Reject firewall log path drift before configuration

2026-09-19 02:33:53 +09:00

LdapDiagnostics.ps1

Make LDAP 1644 diagnostics explicit and preserve existing DC settings

2026-09-19 07:09:07 +09:00

NativeChannelConfiguration.ps1

Add OneSettings auditing and Security warning controls (#408)

2026-09-20 13:55:24 +09:00

NativeProviderPacks.ps1

Add opt-in native DNS and provider audit packs (#411)

2026-09-20 13:58:49 +09:00

PowerShellTranscription.ps1

Add opt-in Windows PowerShell transcription for CIS Level 2

2026-09-19 07:09:33 +09:00

RetentionHealth.ps1

Report native log retention and collection health evidence (#410)

2026-09-20 14:01:43 +09:00

Review-AuditCatalog.ps1

Correct legacy token audit GUID and validate catalog mapping uncertainty

2026-09-19 07:01:50 +09:00

SmbAuditing.ps1

Separate SMB policy verification from runtime activation

2026-09-19 04:39:55 +09:00

TargetedSaclPlanning.ps1

Preserve configured user-file suffixes in SACL plans

2026-09-19 06:21:18 +09:00

WefDeployment.ps1

Normalize WEF XML evidence before PowerShell 5.1 JSON serialization

2026-09-19 07:31:23 +09:00

WmiNamespaceAuditing.ps1

Restrict native WMI writes to SACL and verify privilege cleanup

2026-09-19 05:41:08 +09:00