.. generated, remove this comment to keep this file ``notifications.appdb`` ======================= .. code-block:: console $ target-query -f notifications.appdb .. list-table:: Details :widths: 20 80 * - Module - ``dissect.target.plugins.os.windows.notifications.NotificationsPlugin`` * - Output - ``records`` **Module documentation** Plugin that parses the notification databases on Windows 10 machines. **Function documentation** Retrun the data from Windows appdb.dat file. This file contains data presentted to the user, pushed by external sources. The appdb.dat file was used from Windows 8 to Windows 10 pre anniversary version. This plugin only supports appdb.dat version 3 from Windows 10. References: - http://www.swiftforensics.com/2016/06/prasing-windows-10-notification-database.html