Wylie, Texas
lee@forensic4cast.com

Tag: volume

Shadow Analyser Article by The Register

Greetings all. As you may (or may not) know Mark McKinnon, Disklabs and I are working together on a project that we call ‘Shadow Analyser’. We have put a lot of time and effort into this and hope to have it released very soon. This last week The Register published an article about our upcoming…
Read more

Into The Shadows

Lee Whitfield gives insight into Microsoft Volume Shadow Copies and shows how to extract meaningful data by manually deconstructing these files.