From a91042ae0288db091bc725e68da751d1d8a659d7 Mon Sep 17 00:00:00 2001 From: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com> Date: Thu, 8 May 2025 04:48:08 +0900 Subject: [PATCH] Update queries.yml (#28897) uppercase 'S' was breaking the query. --- docs/queries.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/queries.yml b/docs/queries.yml index 089ff6359d..2eb479f9d6 100644 --- a/docs/queries.yml +++ b/docs/queries.yml @@ -2551,7 +2551,7 @@ spec: name: Get Shimcache table platform: windows description: Returns forensic data showing evidence of likely file execution, in addition to the last modified timestamp of the file, order of execution, full file path order of execution, and the order in which files were executed. - query: select * from Shimcache + query: select * from shimcache purpose: Informational tags: hunting contributors: puffyCid