Skip to content
NotificationPARSER

Glossary

Notification handler

An app registered with the Windows notification platform, stored as a NotificationHandler row with its PrimaryId, type and creation time.

Every app that can notify the user has a row in NotificationHandler: a RecordId referenced by its notifications, a PrimaryId that identifies the app, a HandlerType such as app:desktop or app:immersive, and text CreatedTime / ModifiedTime values. A handler created during an incident, or one identified by a path in a user-writable folder, is worth checking. See tables and columns explained.