Merge pull request #42 from rathbuna/master

Update Windows_EventTranscriptDB_DataSampling.smap
EricZimmerman · Sep 14, 2021 · b11870c · b11870c
2 parents 26f5446 + b4f37ac
commit b11870c
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/SQLMap/Maps/Windows_EventTranscriptDB_DataSampling.smap b/SQLMap/Maps/Windows_EventTranscriptDB_DataSampling.smap
@@ -1,12 +1,12 @@
-Description: EventTranscript.db
+Description: EventTranscript.db - Data Sampling
 Author: Andrew Rathbun
 Email: andrew.rathbun@kroll.com
 Id: 4529ee5e-088d-4822-8cfe-ccaf46e0b1f9
 Version: 1.0
 FileName: EventTranscript.db
 CSVPrefix: Windows
 IdentifyQuery: SELECT count(*) FROM sqlite_master WHERE type='table' AND (name='categories' OR name='event_categories' OR name='event_tags' OR name='events_persisted' OR name='producers' OR name='provider_groups' OR name='tag_descriptions');
-IdentifyValue: 4
+IdentifyValue: 7
 Queries:
     -
         Name: Windows EventTranscript.db BrowsingHistory