From 87be8552170fbb2f3bbe2fac51f5a5fb5811aaf1 Mon Sep 17 00:00:00 2001
From: Costas K <11378310+kacos2000@users.noreply.github.com>
Date: Sat, 29 Oct 2022 13:30:19 +0300
Subject: [PATCH] Win11 Search SecStore.db

---
 Win_Search_SecStore.sql | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 Win_Search_SecStore.sql

diff --git a/Win_Search_SecStore.sql b/Win_Search_SecStore.sql
new file mode 100644
index 0000000..6024c11
--- /dev/null
+++ b/Win_Search_SecStore.sql
@@ -0,0 +1,18 @@
+-- This query is to show the content of the SecurityDescriptor table
+-- of the new SecStore.db (Win 11 search database)
+--
+-- Database location:
+-- C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\SecStore.db
+
+Select 
+Id,
+-- Since the field 'Value' is a BLOB containing Text
+-- but has many separator which might cause mis-handling from, DB Browser & CSV tools,
+-- this will show the content in quotes:
+quote(value) as 'Value',
+-- Remove null value from columns
+case when EnterpriseIds notnull
+then EnterpriseIds else ""
+end as 'EnterpriseIds'
+
+from SecurityDescriptor
\ No newline at end of file