Posts Tagged ‘Volume Shadow Copy’

Most Recent
 
Read More
2016-12-26

Volume Shadow Copy Analysis

Today let’s talk about the Volume Shadow Copy Service ( “VSS”), like everybody knows, this service is an integral part of the Windows operating system and is essential for analysts. Copy Service (VSS) provides two functions: snapshot (short-term backup of all files NTFS volume) and archiving of files opened or blocked an application like Microsoft SQL Server or Microsoft Exchange. VSS creates shadow copies on a schedule or on demand.

 

829
Latest Headlines
 
Read More
722
 
Read More
393
 
Read More
774

Trending Topics
digital forensics
computer forensics
Articles
mobile forensics
DFIR
digital forensics software
Android forensics
windows forensics
incident response
Top Stories
 
 
Right Now
 
bstrings 1.0 released
Top Five
Heat Index
 
1
Decrypting encrypted WhatsApp databases without the key
 
2
How to Make the Forensic Image of the Hard Drive
 
3
Extracting data from SmartSwitch backups
 
4
Forensic tools for your Mac
 
5
An Overview of Web Browser Forensics