August 2017
Beginner to intermediate
274 pages
8h 11m
English
VSSADMIN displays available Volume Shadow Copies on a mounted forensic image. MKLINK creates a symbolic link to the shadow copy, so a digital forensic examiner can browse it in Windows Explorer.
Read now
Unlock full access