Quantcast
Channel: Computer & Digital Forensics Blog » Volume Shadow Copy
Browsing latest articles
Browse All 4 View Live

Volume Shadow Copy Part 1

Introduction to project volume shadow copies Windows Volume Shadow Copy service “creates a differential backup periodically to create a restore point for the user”...

View Article



Volume Shadow Copy Part 2

Where is Volume Shadow Copy on your system? In part two of our blog series on Volume Shadow Copies, we clear up the common misconception that VSC has been removed from Windows 8 and briefly describe...

View Article

Volume Shadow Copy Part 3

What we found in the Volume Shadow Copy for Windows 7 After creating a raw image of the Volume Shadow Copy, we were able to view it in both FTK and Encase. We most often used Encase to examine the raw...

View Article

Volume Shadow Copy Part 4

File History Windows 8 and 8.1   As mentioned in our second blog, the Volume Shadow Copy Service is still available on Windows 8. However, we have since discovered that on Windows 8.1 the service was...

View Article
Browsing latest articles
Browse All 4 View Live




Latest Images