Support Windows 11 search index file (Windows.db)

[sidomir7]

In the rule there is:
Globs:

• C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb
  But in many systems database has name
  Windows.db

So this Rule will miss this artefact.

[scudette]

Sure - maybe send a PR with a Windows.*db or something?

[sidomir7]

Windows.*db should work

[sidomir7]

My PR did not help. I think if there is windows.db file it needs diferent aproach for analysis ?

[scudette]

According to https://www.cyberengage.org/post/a-deep-dive-into-windows-search-database-parsing-winsearchdbanalyzer---sqlite---sidr this file is in Windows 11. I took a quick look at it and it is a SQLite file (whereas the Windows.edb file is an ese file).

We will need to write a different definition for it. So I changed the title of the issue to reflect that.