diff --git a/docs/queries.yml b/docs/queries.yml index 089ff6359d..2eb479f9d6 100644 --- a/docs/queries.yml +++ b/docs/queries.yml @@ -2551,7 +2551,7 @@ spec: name: Get Shimcache table platform: windows description: Returns forensic data showing evidence of likely file execution, in addition to the last modified timestamp of the file, order of execution, full file path order of execution, and the order in which files were executed. - query: select * from Shimcache + query: select * from shimcache purpose: Informational tags: hunting contributors: puffyCid