Volume Shadow Copy

Turkish equivalent: Birim gölge kopyasıDomain: Digital Forensics

A Windows snapshot mechanism that can preserve earlier versions of files and filesystem state for backup, recovery, or forensic analysis.

  • Disk Image
  • Forensic Timeline
  • Registry Hive
  • File System