Difference between revisions of "Libvshadow"

From ForensicsWiki
Jump to: navigation, search
Line 9: Line 9:
  
 
The '''libvshadow''' package contains a library and applications to read the [[Windows_Shadow_Volumes | Volume Service Snapshot (VSS) ]] volumes.
 
The '''libvshadow''' package contains a library and applications to read the [[Windows_Shadow_Volumes | Volume Service Snapshot (VSS) ]] volumes.
 
== History ==
 
 
Libvshadow was created by [[Joachim Metz]] in 2011.
 
  
 
== Tools ==  
 
== Tools ==  
Line 18: Line 14:
 
* '''vshadowinfo''', which shows information about VSS Volumes.
 
* '''vshadowinfo''', which shows information about VSS Volumes.
 
* '''vshadowmount''', which FUSE mounts VSS Volumes.
 
* '''vshadowmount''', which FUSE mounts VSS Volumes.
 +
 +
== History ==
 +
 +
Libvshadow was created by [[Joachim Metz]] in 2011.
  
 
== External Links ==
 
== External Links ==
  
 
* [http://code.google.com/p/libvshadow/ libvshadow project site]
 
* [http://code.google.com/p/libvshadow/ libvshadow project site]

Revision as of 00:42, 31 July 2012

libvshadow
Maintainer: Joachim Metz
OS: Linux, FreeBSD, NetBSD, OpenBSD, Mac OS X, Windows
Genre: Analysis
License: LGPL
Website: code.google.com/p/libvshadow/

The libvshadow package contains a library and applications to read the Volume Service Snapshot (VSS) volumes.

Tools

The libvshadow package contains the following tools:

  • vshadowinfo, which shows information about VSS Volumes.
  • vshadowmount, which FUSE mounts VSS Volumes.

History

Libvshadow was created by Joachim Metz in 2011.

External Links