From 08d02356084d1e6facbb4ca80498e2a1ed79298a Mon Sep 17 00:00:00 2001
From: Thomas Stromberg <t+github@chainguard.dev>
Date: Fri, 12 May 2023 16:26:44 -0400
Subject: [PATCH] Fix bug

---
 incident_response/files-downloads.sql | 4 ++--
 incident_response/socket_events.sql   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/incident_response/files-downloads.sql b/incident_response/files-downloads.sql
index b87e626..b533290 100644
--- a/incident_response/files-downloads.sql
+++ b/incident_response/files-downloads.sql
@@ -11,5 +11,5 @@ FROM
   LEFT JOIN magic ON file.path = magic.path
   LEFT JOIN hash ON file.path = hash.path
 WHERE
-  file.path LIKE "/home/%/Downloads/%%"
-  OR file.path LIKE "/Users/%/Downloads/%%"
+  file.path LIKE "/home/%/Downloads/%"
+  OR file.path LIKE "/Users/%/Downloads/%"
diff --git a/incident_response/socket_events.sql b/incident_response/socket_events.sql
index be37f0c..557d224 100644
--- a/incident_response/socket_events.sql
+++ b/incident_response/socket_events.sql
@@ -6,5 +6,5 @@
 SELECT
   *
 FROM
-  socket_events;
+  socket_events
 WHERE time > (strftime('%s', 'now') -600)