Loading connector details…
Loading connector details…
Choose a unique username to continue using AgentHotspot
by hoihosick • Uncategorized
An MCP server that analyzes E01 disk images to extract and parse Windows LNK shortcut artifacts.
Scan entire E01 disk images for Windows LNK shortcut files.
Extract specific LNK files by inode from disk images.
Detailed parsing of LNK metadata and timeline analysis.
This MCP server processes E01 disk images using pyewf to handle compressed containers and automatically detects NTFS partitions by analyzing MBR/GPT. It provides five analysis tools for scanning, extracting, parsing, automating LNK artifact analysis, and timeline extraction, facilitating efficient digital forensic investigations. The server integrates with MCP-supporting agents to perform comprehensive LNK artifact analysis.
Scores are informational only and provided “as is” without warranty. AgentHotspot assumes no liability for actions taken based on these ratings.