|
|
| Line 1: |
Line 1: |
| − | ==Volume Shadow Copy Service==
| + | '''Welcome to ''Forensics Wiki''!''' |
| − | Windows has included the Volume Shadow Copy Service in it's releases since Windows XP. The Shadow Copy Service creates differential backups periodically to create restore points for the user. Windows 7 Professional and Ultimate editions include tools to work with and manage the Volume Shadow Copy Service, including the ability to [[mount shadow volumes on disk images]].
| + | We hope you will contribute much and well. |
| − | | + | You will probably want to read the [[Help:Contents|help pages]]. |
| − | == Also see ==
| + | Again, welcome and have fun! [[User:.FUF|.FUF]] 12:52, 14 February 2011 (PST) |
| − | * [[Mount shadow volumes on disk images]]
| + | |
| − | | + | |
| − | == External Links ==
| + | |
| − | * [http://computer-forensics.sans.org/blog/2008/10/10/shadow-forensics/ VISTA and Windows 7 Shadow Volume Forensics], by [[Rob Lee]], October 2008
| + | |
| − | * [http://forensic4cast.com/2010/04/19/into-the-shadows/ Into The Shadows], by [[Lee Whitfield]], April 2010
| + | |
| − | * [http://code.google.com/p/libvshadow/downloads/detail?name=Volume%20Shadow%20Snapshot%20%28VSS%29%20format.pdf Volume Shadow Snapshot format], by [[Joachim Metz]], March 2011
| + | |
| − | * [http://computer-forensics.sans.org/blog/2011/09/16/shadow-timelines-and-other-shadowvolumecopy-digital-forensics-techniques-with-the-sleuthkit-on-windows/ Shadow Timelines And Other VolumeShadowCopy Digital Forensics Techniques with the Sleuthkit on Windows], by [[Rob Lee]], September 2011
| + | |
| − | * [http://justaskweg.com/?p=351 Getting Ready for a Shadow Volume Exam], by [[Jimmy Weg]], June 2012
| + | |
| − | * [http://justaskweg.com/?p=466 Mounting Shadow Volumes], by [[Jimmy Weg]], July 2012
| + | |
| − | * [http://justaskweg.com/?p=518 Examining the Shadow Volumes with X-Ways Forensics], by [[Jimmy Weg]], July 2012
| + | |
| − | | + | |
| − | == Tools ==
| + | |
| − | * [[libvshadow]]
| + | |
Latest revision as of 15:52, 14 February 2011
Welcome to Forensics Wiki!
We hope you will contribute much and well.
You will probably want to read the help pages.
Again, welcome and have fun! .FUF 12:52, 14 February 2011 (PST)
