CSEC_PUBLIC/WELA
1
0
Fork 0
mirror of https://github.com/Yamato-Security/WELA.git synced 2026-09-29 18:44:31 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
f4cc10cbbaa9feed1955426822df24bd8ed8e3f8
WELA/tests
T
History
Shirofune-Security f180ca72ae Merge latest dev before registry probe merge
2026-09-22 18:16:38 +09:00
..
fixtures
Fit disposable account description within Windows limit
2026-09-21 09:33:49 +09:00
AdcsAuditing.Tests.ps1
Guard AD CS audit configuration and collect native request evidence (#421)
2026-09-20 19:34:03 +09:00
AdcsAuditing.Windows.Tests.ps1
Resume a reviewed pending AD CS auditing restart (#431)
2026-09-21 09:16:39 +09:00
AdcsRestartResume.Cli.Tests.ps1
Resume a reviewed pending AD CS auditing restart (#431)
2026-09-21 09:16:39 +09:00
AdcsRestartResume.Tests.ps1
Resume a reviewed pending AD CS auditing restart (#431)
2026-09-21 09:16:39 +09:00
AdObjectSacl.Tests.ps1
Isolate unknown dMSA prerequisites from other AD audit classes
2026-09-19 06:20:41 +09:00
AdObjectSacl.Windows.Tests.ps1
Confirm AD SACL receipt ownership and validate exact PKI parent
2026-09-19 05:47:54 +09:00
AppLockerProbe.Tests.ps1
Validate native AppLocker EXE event generation with an opt-in probe (#423)
2026-09-20 22:46:56 +09:00
AppLockerProbe.Windows.Tests.ps1
Validate native AppLocker EXE event generation with an opt-in probe (#423)
2026-09-20 22:46:56 +09:00
AppLockerReadiness.Tests.ps1
Validate native AppLocker EXE event generation with an opt-in probe (#423)
2026-09-20 22:46:56 +09:00
AppLockerReadiness.Windows.Tests.ps1
Handle unused AppLocker placeholders without weakening merge enforcement guards
2026-09-19 06:25:36 +09:00
AppLockerScriptProbe.Cli.Tests.ps1
Add fixed native AppLocker Script probe and disposable evidence matrix
2026-09-21 22:22:21 +09:00
AppLockerScriptProbe.Tests.ps1
Load the service enum for isolated Windows PowerShell fixtures
2026-09-21 22:38:22 +09:00
AppLockerScriptProbe.Windows.Tests.ps1
Integrate reviewed CLI, channels and AppLocker Script probe
2026-09-22 07:24:32 +09:00
audit-profiles.Tests.ps1
Preserve additional minimum audit flags and reject unknown CA roles
2026-09-18 22:04:43 +09:00
audit-profiles.Windows.Tests.ps1
Exercise real audit CLI export in Windows read-only smoke
2026-09-18 22:05:13 +09:00
AuditCatalogMappings.Tests.ps1
Correct legacy token audit GUID and validate catalog mapping uncertainty
2026-09-19 07:01:50 +09:00
AuditCatalogMappings.Windows.Tests.ps1
Correct legacy token audit GUID and validate catalog mapping uncertainty
2026-09-19 07:01:50 +09:00
AuditIntegrity.Tests.ps1
Add source-specific Windows audit privilege and integrity controls (#412)
2026-09-20 14:03:18 +09:00
AuditIntegrity.Windows.Tests.ps1
Add source-specific Windows audit privilege and integrity controls (#412)
2026-09-20 14:03:18 +09:00
AuditNotifications.Tests.ps1
Add OneSettings auditing and Security warning controls (#408)
2026-09-20 13:55:24 +09:00
AuditNotifications.Windows.Tests.ps1
Add OneSettings auditing and Security warning controls (#408)
2026-09-20 13:55:24 +09:00
AuditPrecedence.Tests.ps1
Gate conditional IPsec auditing on native prerequisite evidence (#439)
2026-09-21 17:42:53 +09:00
AuditPrecedence.Windows.Tests.ps1
Verify advanced audit precedence before applying subcategories
2026-09-19 02:21:55 +09:00
AuditProfileNativeWriter.Tests.ps1
Fix audit applicability, NTLM value types, and native exit verification
2026-09-19 00:36:38 +09:00
AuditProfileOutput.Tests.ps1
Merge commit '45b6be91a8a35e1f08f6138fff70e0c6fafc58d1' into feat/387-native-rule-eligibility
2026-09-19 11:46:07 +09:00
AuditRecovery.Tests.ps1
Restore selected audit changes from reviewed recovery evidence (#419)
2026-09-20 19:30:49 +09:00
AuditRecovery.Windows.Tests.ps1
Restore selected audit changes from reviewed recovery evidence (#419)
2026-09-20 19:30:49 +09:00
AuditScoring.Tests.ps1
Add transparent configuration and native rule readiness scores (#417)
2026-09-20 18:15:04 +09:00
AuditScoring.Windows.Tests.ps1
Add transparent configuration and native rule readiness scores (#417)
2026-09-20 18:15:04 +09:00
Capi2Probe.Cli.Tests.ps1
Reject unbound preview and positional probe arguments
2026-09-21 18:23:54 +09:00
Capi2Probe.Tests.ps1
Bind strict receipt parser into CAPI2 source evidence
2026-09-21 18:11:13 +09:00
Capi2Probe.Windows.Tests.ps1
Pin observed CAPI2 XML and require existing running services
2026-09-21 18:03:42 +09:00
ChannelRead.Tests.ps1
Verify actual current-token access to built-in event channels (#432)
2026-09-21 09:18:46 +09:00
ChannelRead.Windows.Tests.ps1
Verify actual current-token access to built-in event channels (#432)
2026-09-21 09:18:46 +09:00
ChannelRecovery.Cli.Tests.ps1
Add reviewed recovery of one completed native channel operation
2026-09-22 07:52:16 +09:00
ChannelRecovery.Tests.ps1
Accept genuine native channel snapshot size and provider representation
2026-09-22 08:02:36 +09:00
ChannelRecovery.Windows.Tests.ps1
Add reviewed recovery of one completed native channel operation
2026-09-22 07:52:16 +09:00
CliArguments.Tests.ps1
Reject unknown CLI arguments before legacy command dispatch
2026-09-21 22:16:44 +09:00
ControlApplicability.Tests.ps1
Gate historical controls and require evidence for Windows defaults (#409)
2026-09-20 14:00:10 +09:00
ControlApplicability.Windows.Tests.ps1
Gate historical controls and require evidence for Windows defaults (#409)
2026-09-20 14:00:10 +09:00
CustomAuditProfiles.Tests.ps1
Support validated custom audit profile files through the shared engine (#416)
2026-09-20 18:09:52 +09:00
CustomAuditProfiles.Windows.Tests.ps1
Support validated custom audit profile files through the shared engine (#416)
2026-09-20 18:09:52 +09:00
DnsAnalytical.Tests.ps1
Add guarded DNS analytical logging and stopped-trace archives (#425)
2026-09-20 22:49:52 +09:00
DnsAnalytical.Windows.Tests.ps1
Add guarded DNS analytical logging and stopped-trace archives (#425)
2026-09-20 22:49:52 +09:00
DnsClientProbe.Cli.Tests.ps1
Add fixed native DNS Client completion probe and acceptance fixture
2026-09-21 09:33:53 +09:00
DnsClientProbe.Diagnostics.ps1
Bind documented DNS query export exactly and match Microsoft server buffer
2026-09-21 10:41:30 +09:00
DnsClientProbe.Tests.ps1
Use precise native DNS operation timestamps and nonce-only event reads
2026-09-21 10:47:06 +09:00
DnsClientProbe.Windows.Tests.ps1
Bind documented DNS query export exactly and match Microsoft server buffer
2026-09-21 10:41:30 +09:00
DomainNtlm.Tests.ps1
Fix audit applicability, NTLM value types, and native exit verification
2026-09-19 00:36:38 +09:00
DomainNtlmAuditOutput.Tests.ps1
Assess native rule eligibility with explicit evidence gates
2026-09-19 07:24:04 +09:00
EventLogRecovery.Cli.Tests.ps1
Refuse unknown recovery options before native restoration
2026-09-21 18:24:06 +09:00
EventLogRecovery.Tests.ps1
Bind the reviewed native host gate and context dependency
2026-09-21 18:17:23 +09:00
EventLogRecovery.Windows.Tests.ps1
Refuse unknown recovery options before native restoration
2026-09-21 18:24:06 +09:00
EventLogSettings.Tests.ps1
Unify event-log size and retention profiles with verified configuration
2026-09-19 02:30:41 +09:00
EventLogSettings.Windows.Tests.ps1
Unify event-log size and retention profiles with verified configuration
2026-09-19 02:30:41 +09:00
EventMeasurement.Tests.ps1
Measure bounded native event delivery and verify exact EVTX samples (#430)
2026-09-21 09:14:48 +09:00
EventMeasurement.Windows.Tests.ps1
Measure bounded native event delivery and verify exact EVTX samples (#430)
2026-09-21 09:14:48 +09:00
EvtxRecovery.Tests.ps1
Verify native EVTX recovery under the actual primary reader token
2026-09-21 09:30:59 +09:00
EvtxRecovery.Windows.Tests.ps1
Verify native EVTX recovery under the actual primary reader token
2026-09-21 09:30:59 +09:00
FailedLogonProbe.Cli.Tests.ps1
Add a native local failed-logon audit probe (#444)
2026-09-21 22:13:20 +09:00
FailedLogonProbe.Tests.ps1
Add a native local failed-logon audit probe (#444)
2026-09-21 22:13:20 +09:00
FailedLogonProbe.Windows.Tests.ps1
Add a native local failed-logon audit probe (#444)
2026-09-21 22:13:20 +09:00
FileAccessProbe.Cli.Tests.ps1
Checkpoint exact native one-byte file access probe
2026-09-21 22:27:26 +09:00
FileAccessProbe.Tests.ps1
Measure held-readback phase and refuse implementation targets before hashing
2026-09-21 22:51:50 +09:00
FileAccessProbe.Windows.Tests.ps1
Measure held-readback phase and refuse implementation targets before hashing
2026-09-21 22:51:50 +09:00
FileSaclLifecycle.Windows.Tests.ps1
test: complete filesystem lifecycle fixture dependencies and evidence guide
2026-09-22 11:59:29 +09:00
FileSaclProfileFixture.cs
test: establish owned redirected-profile native SACL fixture
2026-09-22 11:49:31 +09:00
FileSaclRecovery.Cli.Tests.ps1
Add guarded recovery for one selected leaf-file audit ACE
2026-09-21 10:03:00 +09:00
FileSaclRecovery.Descriptor.Tests.ps1
Verify the observed present-null SACL after sole audit ACE removal
2026-09-21 10:26:57 +09:00
FileSaclRecovery.Tests.ps1
Add guarded recovery for one selected leaf-file audit ACE
2026-09-21 10:03:00 +09:00
FileSaclRecovery.Windows.Tests.ps1
Verify the observed present-null SACL after sole audit ACE removal
2026-09-21 10:26:57 +09:00
FirewallLogging.Tests.ps1
Reject firewall log path drift before configuration
2026-09-19 02:33:53 +09:00
FirewallLogging.Windows.Tests.ps1
Add opt-in native firewall text logging controls
2026-09-19 02:24:38 +09:00
FirewallLoggingRecovery.Cli.Tests.ps1
Reject unbound recovery options before command dispatch
2026-09-21 18:23:53 +09:00
FirewallLoggingRecovery.Tests.ps1
Verify stopped providers are refused before connecting
2026-09-21 18:15:30 +09:00
FirewallLoggingRecovery.Windows.Tests.ps1
Add guarded single-profile firewall logging recovery
2026-09-21 17:52:23 +09:00
GpoAuditPackages.Tests.ps1
Add reviewable GPO audit-policy deployment packages (#415)
2026-09-20 18:13:34 +09:00
GpoAuditPackages.Windows.Tests.ps1
Add reviewable GPO audit-policy deployment packages (#415)
2026-09-20 18:13:34 +09:00
GpoCreation.Cli.Tests.ps1
Create new disabled, unlinked GPOs from reviewed native audit backups (#427)
2026-09-20 22:53:00 +09:00
GpoCreation.Tests.ps1
Create new disabled, unlinked GPOs from reviewed native audit backups (#427)
2026-09-20 22:53:00 +09:00
GpoCreation.Windows.Tests.ps1
Create new disabled, unlinked GPOs from reviewed native audit backups (#427)
2026-09-20 22:53:00 +09:00
IntegrationNtlmConfiguration.Tests.ps1
Fix audit applicability, NTLM value types, and native exit verification
2026-09-19 00:36:38 +09:00
IntegrationProfileConfiguration.Tests.ps1
Plan targeted SACL prerequisites alongside audit profiles
2026-09-19 05:25:38 +09:00
IntegrationSafety.Tests.ps1
Fix audit applicability, NTLM value types, and native exit verification
2026-09-19 00:36:38 +09:00
IntuneAuditExport.Cli.Tests.ps1
Export native audit profiles for reviewed Intune client policies (#414)
2026-09-20 18:10:52 +09:00
IntuneAuditExport.Tests.ps1
Export native audit profiles for reviewed Intune client policies (#414)
2026-09-20 18:10:52 +09:00
IpsecPrerequisites.Tests.ps1
Gate conditional IPsec auditing on native prerequisite evidence (#439)
2026-09-21 17:42:53 +09:00
IpsecPrerequisites.Windows.Tests.ps1
Gate conditional IPsec auditing on native prerequisite evidence (#439)
2026-09-21 17:42:53 +09:00
LdapDiagnostics.Tests.ps1
Reject LDAP options before profile command dispatch
2026-09-19 07:15:31 +09:00
LdapDiagnostics.Windows.Tests.ps1
Make LDAP 1644 diagnostics explicit and preserve existing DC settings
2026-09-19 07:09:07 +09:00
NamedRegistryRecovery.Tests.ps1
Add guarded value-only recovery for named logging DWORDs
2026-09-21 09:34:13 +09:00
NamedRegistryRecovery.Windows.Tests.ps1
Add guarded value-only recovery for named logging DWORDs
2026-09-21 09:34:13 +09:00
NativeAuditControls.Tests.ps1
Verify source attribution and prerequisites in native control results
2026-09-18 22:00:52 +09:00
NativeChannelAccess.Tests.ps1
Add opt-in native WEF channel settings and preserved CAPI2 read access
2026-09-19 05:36:29 +09:00
NativeChannelAccess.Windows.Tests.ps1
Construct unknown ACE fixture without PowerShell enum validation
2026-09-19 05:42:06 +09:00
NativeChannelConfigure.Windows.Tests.ps1
Retain native channel preservation evidence and document acceptance limits
2026-09-21 22:26:15 +09:00
NativeProviderConfigure.Windows.Tests.ps1
Pass literal named switches in negative public provider cases
2026-09-22 10:23:04 +09:00
NativeProviderPacks.Tests.ps1
Handle native WinRM manifest IDs without Int32 overflow
2026-09-22 10:10:01 +09:00
NativeProviderPacks.Windows.Tests.ps1
Add opt-in native DNS and provider audit packs (#411)
2026-09-20 13:58:49 +09:00
NativeProviders.Tests.ps1
Merge commit '45b6be91a8a35e1f08f6138fff70e0c6fafc58d1' into feat/387-native-rule-eligibility
2026-09-19 11:46:07 +09:00
NativeProviders.Windows.Tests.ps1
Assess native channels and provider prerequisites without static enabled claims
2026-09-19 02:29:56 +09:00
NativeValidation.Tests.ps1
Collect native 4688 validation components with a fixed benign probe (#413)
2026-09-20 18:08:34 +09:00
NativeValidation.Windows.Tests.ps1
Collect native 4688 validation components with a fixed benign probe (#413)
2026-09-20 18:08:34 +09:00
NtlmAudit.Cli.Tests.ps1
feat: configure selected incoming and domain NTLM audit policies
2026-09-22 12:03:11 +09:00
NtlmAudit.Tests.ps1
fix: require running WMI before scoped NTLM observations
2026-09-22 12:06:11 +09:00
NtlmAudit.Windows.Tests.ps1
fix: require running WMI before scoped NTLM observations
2026-09-22 12:06:11 +09:00
OneSettingsConfigure.Cli.Tests.ps1
fix: preserve omitted notification selection and document native OneSettings acceptance
2026-09-22 12:06:07 +09:00
OneSettingsConfigure.Windows.Tests.ps1
test: compare actual Privacy buffer readback after native rounding
2026-09-22 12:10:46 +09:00
OutgoingNtlm.Tests.ps1
Fix audit applicability, NTLM value types, and native exit verification
2026-09-19 00:36:38 +09:00
OutgoingNtlmAudit.Cli.Tests.ps1
Add scoped outgoing NTLM audit configuration with native acceptance
2026-09-22 10:09:37 +09:00
OutgoingNtlmAudit.Tests.ps1
Add scoped outgoing NTLM audit configuration with native acceptance
2026-09-22 10:09:37 +09:00
OutgoingNtlmAudit.Windows.Tests.ps1
Add scoped outgoing NTLM audit configuration with native acceptance
2026-09-22 10:09:37 +09:00
PowerShellLogging.Cli.Tests.ps1
Merge final reviewed dev sources and preserve literal CLI arguments
2026-09-22 15:08:26 +09:00
PowerShellLogging.Tests.ps1
Preserve literal registry types when projecting logging capacity
2026-09-22 15:44:16 +09:00
PowerShellLogging.Windows.Tests.ps1
Preserve positional bindings and propagate native fixture failures
2026-09-22 14:57:47 +09:00
PowerShellTranscription.Tests.ps1
Add opt-in Windows PowerShell transcription for CIS Level 2
2026-09-19 07:09:33 +09:00
PowerShellTranscription.Windows.Tests.ps1
Add opt-in Windows PowerShell transcription for CIS Level 2
2026-09-19 07:09:33 +09:00
ProcessCommandline.Cli.Tests.ps1
Add scoped native 4688 command-line policy configuration
2026-09-22 14:34:05 +09:00
ProcessCommandline.Tests.ps1
Add scoped native 4688 command-line policy configuration
2026-09-22 14:34:05 +09:00
ProcessCommandline.Windows.Tests.ps1
Add scoped native 4688 command-line policy configuration
2026-09-22 14:34:05 +09:00
ProfileConfigure.Windows.Tests.ps1
Preserve independent cleanup attempts and record actual native host context
2026-09-22 08:00:52 +09:00
RegistrySaclFixtureNative.cs
test: exercise public registry SACL lifecycle and native4657
2026-09-22 08:01:48 +09:00
RegistrySaclLifecycle.Tests.ps1
test: exercise public registry SACL lifecycle and native4657
2026-09-22 08:01:48 +09:00
RegistrySaclLifecycle.Windows.Tests.ps1
test: consume valid review for native prerequisite refusal and harden cleanup
2026-09-22 08:17:10 +09:00
RegistrySaclLifecycleEvidence.ps1
test: exercise public registry SACL lifecycle and native4657
2026-09-22 08:01:48 +09:00
RegistrySaclRecovery.Cli.Tests.ps1
feat: checkpoint reviewed native registry SACL recovery
2026-09-22 10:11:02 +09:00
RegistrySaclRecovery.Tests.ps1
fix: accept exact native empty catalog representations and document recovery
2026-09-22 11:01:38 +09:00
RegistrySaclRecovery.Windows.Tests.ps1
test: retain native registry separators in isolated child scenario
2026-09-22 11:03:48 +09:00
RegistryValueProbe.Cli.Tests.ps1
Add fixed current-user registry value audit probe
2026-09-22 14:55:12 +09:00
RegistryValueProbe.Tests.ps1
Accept native UInt16 CIM domain roles in registry probe preflight
2026-09-22 15:32:00 +09:00
RegistryValueProbe.Windows.Tests.ps1
Add fixed current-user registry value audit probe
2026-09-22 14:55:12 +09:00
RegistryValueProbeFixture.cs
Add fixed current-user registry value audit probe
2026-09-22 14:55:12 +09:00
RetentionHealth.Cli.Tests.ps1
Report native log retention and collection health evidence (#410)
2026-09-20 14:01:43 +09:00
RetentionHealth.Tests.ps1
Report native log retention and collection health evidence (#410)
2026-09-20 14:01:43 +09:00
RetentionHealth.Windows.Tests.ps1
Report native log retention and collection health evidence (#410)
2026-09-20 14:01:43 +09:00
RuleEligibility.Tests.ps1
Use explicit canonical framing for portable metadata hashes
2026-09-19 07:39:47 +09:00
SecurityWarningConfigure.Windows.Tests.ps1
Read registry descriptor from the owned native handle across both engines
2026-09-22 08:07:36 +09:00
SelectedSacl.Tests.ps1
Verify reviewed descendant SACL propagation and preservation (#429)
2026-09-21 09:12:56 +09:00
SelectedSacl.Windows.Tests.ps1
Apply reviewed SACL plans to explicitly selected local targets (#422)
2026-09-20 19:36:05 +09:00
SelectedSaclDescendants.Tests.ps1
Verify reviewed descendant SACL propagation and preservation (#429)
2026-09-21 09:12:56 +09:00
SelectedSaclDescendants.Windows.Tests.ps1
Verify reviewed descendant SACL propagation and preservation (#429)
2026-09-21 09:12:56 +09:00
SelectedSaclFixtureProtection.cs
Verify reviewed descendant SACL propagation and preservation (#429)
2026-09-21 09:12:56 +09:00
SmbAuditing.Tests.ps1
Separate SMB policy verification from runtime activation
2026-09-19 04:39:55 +09:00
SmbAuditing.Windows.Tests.ps1
Separate SMB policy verification from runtime activation
2026-09-19 04:39:55 +09:00
SmbPolicyConfigure.Windows.Tests.ps1
Verify actual SMB audit runtime observations separately from preserved security settings
2026-09-22 10:11:09 +09:00
SmbRuntimeActivation.Cli.Tests.ps1
Activate native SMB audit runtime switches explicitly (#441)
2026-09-21 18:09:10 +09:00
SmbRuntimeActivation.Tests.ps1
Activate native SMB audit runtime switches explicitly (#441)
2026-09-21 18:09:10 +09:00
SmbRuntimeActivation.Windows.Tests.ps1
Activate native SMB audit runtime switches explicitly (#441)
2026-09-21 18:09:10 +09:00
TargetedSaclPlanning.Tests.ps1
Preserve configured user-file suffixes in SACL plans
2026-09-19 06:21:18 +09:00
TargetedSaclPlanning.Windows.Tests.ps1
Plan targeted SACL prerequisites alongside audit profiles
2026-09-19 05:25:38 +09:00
Test-ConfigurationReadOnlyWindows.ps1
Clear expected child failure codes after regression assertions
2026-09-18 21:56:01 +09:00
Test-ConfigurationResults.ps1
Guard AD CS audit configuration and collect native request evidence (#421)
2026-09-20 19:34:03 +09:00
Test-ConfigurationScriptScopeWindows.ps1
Keep deferred configuration callbacks in script scope on PowerShell 5.1
2026-09-18 22:13:58 +09:00
TokenRightAttribution.Tests.ps1
test: bind token task metadata to the native publisher XML namespace
2026-09-22 12:44:51 +09:00
TokenRightAttribution.Windows.Tests.ps1
test: corroborate runtime token task and measure full native verification
2026-09-22 12:43:31 +09:00
TokenRightAttributionEvidence.ps1
test: bind token task metadata to the native publisher XML namespace
2026-09-22 12:44:51 +09:00
TokenRightAttributionNative.cs
test: corroborate runtime token task and measure full native verification
2026-09-22 12:43:31 +09:00
TranscriptionRecovery.Cli.Tests.ps1
Merge final dev and verify strict transcription recovery CLI
2026-09-21 18:22:31 +09:00
TranscriptionRecovery.Tests.ps1
Reject coerced transcription recovery history discriminators
2026-09-21 18:19:57 +09:00
TranscriptionRecovery.Windows.Tests.ps1
Add reviewed native transcription policy recovery
2026-09-21 17:48:32 +09:00
TranscriptProbe.Tests.ps1
Use native module paths and transcript header command formatting
2026-09-21 09:53:50 +09:00
TranscriptProbe.Windows.Tests.ps1
Add current-account automatic transcription probe
2026-09-21 09:43:39 +09:00
WecAuthorization.Cli.Tests.ps1
Review and update only source SID authorization on disabled WEC subscriptions
2026-09-22 07:50:50 +09:00
WecAuthorization.Tests.ps1
Fix WEC variant decoding and native authorization fixture
2026-09-22 08:08:17 +09:00
WecAuthorization.Windows.Tests.ps1
Fix WEC variant decoding and native authorization fixture
2026-09-22 08:08:17 +09:00
WecAuthorizationFixtureNative.cs
Fix WEC variant decoding and native authorization fixture
2026-09-22 08:08:17 +09:00
WecCollectorObservation.Windows.Tests.ps1
Retain independent cleanup snapshots and exercise native read-only smoke
2026-09-22 10:15:48 +09:00
WecIngress.Cli.Tests.ps1
Add reviewed scoped collector firewall ingress creation (#442)
2026-09-21 18:19:30 +09:00
WecIngress.Tests.ps1
Add reviewed scoped collector firewall ingress creation (#442)
2026-09-21 18:19:30 +09:00
WecIngress.Windows.Tests.ps1
Add reviewed scoped collector firewall ingress creation (#442)
2026-09-21 18:19:30 +09:00
WecListener.Checkpoint.Windows.Tests.ps1
Use a fixed native Windows PowerShell 5.1 listener adapter
2026-09-21 22:36:15 +09:00
WecListener.Cli.Tests.ps1
Add reviewed WEC listener CLI contract and operator guide
2026-09-21 22:40:05 +09:00
WecListener.Tests.ps1
Verify effective native worker module path and complete fixture exit status
2026-09-21 23:07:16 +09:00
WecListener.Windows.Tests.ps1
Verify effective native worker module path and complete fixture exit status
2026-09-21 23:07:16 +09:00
WecRuntime.Tests.ps1
Add typed native WEC runtime observations (#424)
2026-09-20 22:48:32 +09:00
WecRuntime.Windows.Tests.ps1
Add typed native WEC runtime observations (#424)
2026-09-20 22:48:32 +09:00
WecState.Cli.Tests.ps1
Review and apply existing WEC subscription enable/disable (#440)
2026-09-21 17:54:55 +09:00
WecState.Tests.ps1
Review and apply existing WEC subscription enable/disable (#440)
2026-09-21 17:54:55 +09:00
WecState.Windows.Tests.ps1
Review and apply existing WEC subscription enable/disable (#440)
2026-09-21 17:54:55 +09:00
WecSubscriptionInventory.Tests.ps1
Fix native collector subscription inventory and Unicode readback
2026-09-22 09:46:28 +09:00
WecSubscriptionXml.Tests.ps1
Add typed native WEC runtime observations (#424)
2026-09-20 22:48:32 +09:00
WecUpdate.Cli.Tests.ps1
Review and apply query updates to existing disabled WEC subscriptions (#426)
2026-09-20 22:51:01 +09:00
WecUpdate.Tests.ps1
Review and apply query updates to existing disabled WEC subscriptions (#426)
2026-09-20 22:51:01 +09:00
WecUpdate.Windows.Tests.ps1
Review and apply query updates to existing disabled WEC subscriptions (#426)
2026-09-20 22:51:01 +09:00
WefArrival.Tests.ps1
Validate native AppLocker EXE event generation with an opt-in probe (#423)
2026-09-20 22:46:56 +09:00
WefArrival.Windows.Tests.ps1
Verify native probe arrival in the local WEF collector (#418)
2026-09-20 19:26:57 +09:00
WefDeployment.Cli.Tests.ps1
Clear expected child failure exit status after CLI assertions
2026-09-19 07:33:32 +09:00
WefDeployment.Tests.ps1
Fix native collector subscription inventory and Unicode readback
2026-09-22 09:46:28 +09:00
WefDeployment.Windows.Tests.ps1
Clear handled native-read exit status after Windows smoke assertions
2026-09-19 07:35:04 +09:00
WefFirewallAddress.Tests.ps1
Add reviewed scoped collector firewall ingress creation (#442)
2026-09-21 18:19:30 +09:00
WefQuery.Cli.Tests.ps1
Handle native host casing and timestamp compatibility in query evidence
2026-09-22 12:14:05 +09:00
WefQuery.Tests.ps1
fix: decode native WEF XML independently of property count
2026-09-22 12:37:37 +09:00
WefQuery.Windows.Tests.ps1
fix: decode native WEF XML independently of property count
2026-09-22 12:37:37 +09:00
WmiNamespaceAuditing.DisposableNamespace.Tests.ps1
Guard WMI inheritance with bounded descendant observations
2026-09-22 14:33:54 +09:00
WmiNamespaceAuditing.Privilege.Tests.ps1
Restrict native WMI writes to SACL and verify privilege cleanup
2026-09-19 05:41:08 +09:00
WmiNamespaceAuditing.Tests.ps1
Guard WMI inheritance with bounded descendant observations
2026-09-22 14:33:54 +09:00
WmiNamespaceAuditing.Windows.Tests.ps1
Restrict native WMI writes to SACL and verify privilege cleanup
2026-09-19 05:41:08 +09:00
WmiNamespaceDescendants.Cli.Tests.ps1
Reject unexplained descendant changes and unrelated WMI command arguments
2026-09-22 14:45:06 +09:00
WmiNamespaceDescendants.Tests.ps1
Retain partial WMI tree observations after a parent write
2026-09-22 14:58:07 +09:00
WmiNamespaceDescendants.Windows.Tests.ps1
Require exact native inherited and protected subtree outcomes
2026-09-22 14:46:26 +09:00
WmiProbe.Cli.Tests.ps1
Collect local WMI namespace audit evidence with a fixed read probe (#428)
2026-09-21 09:08:20 +09:00
WmiProbe.Tests.ps1
Use precise native UTC for WMI probe event intervals (#438)
2026-09-21 17:30:16 +09:00
WmiProbe.Windows.Tests.ps1
Use precise native UTC for WMI probe event intervals (#438)
2026-09-21 17:30:16 +09:00
WmiSaclRecovery.Cli.Tests.ps1
Add reviewed removal of one proven parent-only WMI audit ACE
2026-09-22 14:43:33 +09:00
WmiSaclRecovery.Tests.ps1
Add reviewed removal of one proven parent-only WMI audit ACE
2026-09-22 14:43:33 +09:00
WmiSaclRecovery.Windows.Tests.ps1
Add reviewed removal of one proven parent-only WMI audit ACE
2026-09-22 14:43:33 +09:00