Windows Forensics: Understand Analysis Techniques for Your Windows

© Chuck Easttom, William Butler, Jessica Phelan, Ramya Sai Bhagavatula, Sean Steuber, Karely Rodriguez, Victoria Indy Balkissoon, Zehra Naseer 2024

C. Easttom et al.Windows Forensicshttps://doi.org/10.1007/979-8-8688-0193-8_7

7. Windows Shadow Copy

Chuck Easttom, Ph.D., D.Sc.

Chuck Easttom¹  , William Butler², Jessica Phelan³, Ramya Sai Bhagavatula⁴, Sean Steuber⁵, Karely Rodriguez⁶, Victoria Indy Balkissoon⁷ and Zehra Naseer⁸

(1)

Plano, TX, USA

(2)

Maryland, MD, USA

(3)

Austin, TX, USA

(4)

Houston, TX, USA

(5)

Kansas City, MO, USA

(6)

Bonney Lake, WA, USA

(7)

Lake Mary, FL, USA

(8)

Eastvale, CA, USA

 

Introduction

Having backups of key data, data that has changed, is important. Since Windows 7, Microsoft has included a feature called Volume Shadow Copy, often abbreviated ...