Volume Shadow Copy (VSS)
Block-level snapshots of NTFS volumes maintained by the Volume Shadow Copy Service for System Restore and backup. Recoverable with vss-tools, ShadowExplorer, KAPE, or the libvshadow library.
Block-level snapshots of NTFS volumes maintained by the Volume Shadow Copy Service for System Restore and backup. Recoverable with vss-tools, ShadowExplorer, KAPE, or the libvshadow library.
Practice with mock tests, learn from structured notes, and get your questions answered by a global forensic community, all in one place.