notifications.appdb#

$ target-query <path/to/target> -f notifications.appdb
Details#

Module

os.windows.notifications.NotificationsPlugin

Output

records

Module documentation

Plugin that parses the notification databases on Windows 10 machines.

Function documentation

Retrun the data from Windows appdb.dat file.

This file contains data presentted to the user, pushed by external sources. The appdb.dat file was used from Windows 8 to Windows 10 pre anniversary version. This plugin only supports appdb.dat version 3 from Windows 10.

References: