Windows-Notification-Analysis-MCP-Server

hoihosick/Windows-Notification-Analysis-MCP-Server

3.2

If you are the rightful owner of Windows-Notification-Analysis-MCP-Server and would like to certify it and/or have it hosted online, please leave a comment on the right or send an email to dayong@mcphub.com.

The Windows Notification Analysis MCP Server is designed to extract and analyze Windows notification databases from E01 forensic images, providing a comprehensive forensic analysis tool.

Tools

Functions exposed to the LLM to take actions

scan_e01_for_notification_dbs

Scans E01 images for notification databases.

extract_notification_db

Extracts notification DB for a specific user.

auto_analyze_e01_notifications

Performs automatic comprehensive analysis of E01 notifications.

parse_all_notifications

Parses all notifications from the database.

search_notifications

Searches notifications by keyword.

Prompts

Interactive templates invoked by user choice

No prompts

Resources

Contextual data attached and managed by the client

No resources