Changes to WindowsPushNotificationDatabaseFile definition (#631)

ForensicArtifacts · Jun 24, 2024 · 930561a · 930561a
1 parent 2137a23
commit 930561a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/artifacts/data/windows.yaml b/artifacts/data/windows.yaml
@@ -2019,7 +2019,7 @@ sources:
   attributes:
     paths:
     - '%%users.localappdata%%\Microsoft\Windows\Notifications\wpndatabase.db'
-    - '%%environ_systemroot%%\System32\config\ystemprofile\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db'
+    - '%%environ_systemroot%%\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db'
     separator: '\'
 supported_os: [Windows]
 ---