Skip to content
#

volume-shadow-copy

Here are 7 public repositories matching this topic...

Windows Volume Shadow Copy forensic library — reads VSS store/catalog structures, enumerates shadow copies, reconstructs each snapshot's point-in-time volume view (copy-on-write read-back), and grades deletion/timeline anomalies as forensicnomicon findings. Panic-free, fuzzed, Tier-1 validated against libvshadow.

  • Updated Aug 20, 2026
  • Rust

Add this topic to your repo

To associate your repository with the volume-shadow-copy topic, visit your repo's landing page and select "manage topics."

Learn more