Second case i’ve encountered is about authenticode table… it has the column ‘path’: must provide a path or directory the following query works Select * FROM authenticode WHERE path=‘C:\\processExplorer\\procexp.exe’; but the following query not works Select * FROM authenticode WHERE path=‘C:\\processExplorer\\’; I think this table only run with a path, not a directory.