Loading connector details…
E01 LNK MCP Server
MCPOpen Source29.0
by hoihosick • Uncategorized
An MCP server that analyzes E01 disk images to extract and parse Windows LNK shortcut artifacts.
Example Use Cases
- 1
Scan entire E01 disk images for Windows LNK shortcut files.
- 2
Extract specific LNK files by inode from disk images.
- 3
Detailed parsing of LNK metadata and timeline analysis.
Description
This MCP server processes E01 disk images using pyewf to handle compressed containers and automatically detects NTFS partitions by analyzing MBR/GPT. It provides five analysis tools for scanning, extracting, parsing, automating LNK artifact analysis, and timeline extraction, facilitating efficient digital forensic investigations. The server integrates with MCP-supporting agents to perform comprehensive LNK artifact analysis.
Quick Actions
Security
Scanned 27 days agoRisk Level
MINIMAL
Read-only data retrieval, no side effects
Trust Score
D38/100
4/17 checks passed
Scores are informational only and provided “as is” without warranty. AgentHotspot assumes no liability for actions taken based on these ratings.
Quick Stats
Service TypeMCP
Pricing ModelFree
Capabilities0 Tools / 0 Prompts / 0 Resources
Ownerhoihosick
CategoryUncategorized
DependenciesStandalone
TagsNo tags