Open AndrewRathbun opened 1 year ago
Also, more as an FYI, I added some Windows 11 Windows.db
artifacts here for public consumption.
Basically, a snapshot of the artifacts from when I booted Windows, after I did some browsing (browsing artifacts didn't commit to database yet), then again 10 minutes of idle time or so after (browsing artifacts commited to SQLite DB).
I unfortunately don't have a good sample database to provide as I've only experienced this with my personal computer's Windows 11
Windows.db
file, but when I run sidr against my personalWindows.db
, I get the following error:I almost didn't submit this issue because I wasn't going to provide my personal 800+mb
Windows.db
file, and in my testing, I can't seem to recreate this with a fresh W11 VM. However, I figure I'd provide some context of my testing environment.Windows.edb
->Windows.db
but it very well may be relevant down the road.Windows.db
successfully, but not sure why I can there but not for my personal system. Who knows!So, all that to say there may be something more going on with my personal system given the above circumstances, so feel free to close if this is too much of an edge case to spend time on (which I totally get), but without documenting this behavior, it'll get forgotten about and very well may be relevant down the road as development continues.