Built off the open source project Osquery
Description: This query searches the downloads folder of all computers looking for .iso files. Can be changed to any file type or folder also.
What The Data Shows: Device, File if found, location if found
Select *FROM FILEWhere file.path like 'C:\users\%\Downloads\%%'AND file.filename like '%.iso'
Sorry for the delay in reviewing your submission! I will approve it shortly, but the use of "file." on path and filename is not necessary because you are only using one table.
Copyright © 2005-2023 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.