Minoru Kobayashi has presented a tool for carving and recreating deleted VSS at at Japan Security Analyst Conferen…

In this article, we are going to take a close look at the fundamentally new sources of digital evidences that are typical fo…

BlackBag Training Team has published a fresh post. This time they are speaking about Windows Volume Shadow Copies. You …

Dan Pullega has published a useful “forensics quickie” in his blog. In the post he shows how to access and …

Matt Bromiley has published a very useful post on forensic analysis of Volume Shadow Copies. …

Have you ever dug for deleted shadow copies during your Windows forensic examination? …