Software
software:volume_shadow_copy_service
Also: VSS, Volume Shadow Copies
Windows service used in the forensic investigation to locate earlier snapshots containing files that predated the arrest.
Windows service used in the forensic investigation to locate earlier snapshots containing files that predated the arrest.
“This computer was running Windows 8 and had the Volume Shadow Copy Service enabled”
“Secret Service looked through the Volume Shadow Copy”
Volume Shadow Copy Service AFFECTS Windows 8
The Windows 8 laptop had Volume Shadow Copy Service enabled and used it to retain snapshots of files.
Explicit Confidence 99% · Jack Rhysider EP 32 Details
“This computer was running Windows 8 and had the Volume Shadow Copy Service enabled.”