Oliver Kieselbach 88dfd331dd fix(security): LocalAdminAnalyzer inventories disabled accounts and reads Administrators-group membership from the SAM (NetLocalGroupGetMembers on S-1-5-32-544); a dormant /active:no admin backdoor now surfaces as unexpected_admin_members (+40, Error), built-in Administrator enabled-state reported for evidence ...

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-30 01:00:29 +02:00

..

.gitattributes

chore: unignore rules/dist/ and add initial combined rule files

2026-02-28 13:24:15 +01:00

analyze-rules.json

fix(security): LocalAdminAnalyzer inventories disabled accounts and reads Administrators-group membership from the SAM (NetLocalGroupGetMembers on S-1-5-32-544); a dormant /active:no admin backdoor now surfaces as unexpected_admin_members (+40, Error), built-in Administrator enabled-state reported for evidence

2026-08-30 01:00:29 +02:00

cpe-community-mappings.json

feat: enhanced software inventory and vulnerability report

2026-03-20 19:01:16 +01:00

cpe-mapping-seed.json

new seed file

2026-04-07 09:47:59 +02:00

gather-rules.json

rules: hybrid user-affinity + never-settled-app detection, dsregcmd on_event snapshot, evidence interpolation fixes

2026-08-14 13:39:16 +02:00

ime-log-patterns.json

fix(agent): complete enrollments with zero user-targeted apps instead of failing them

2026-08-25 12:27:42 +02:00