VSSADMIN displays available Volume Shadow Copies on a mounted forensic image. MKLINK creates a symbolic link to the shadow copy, so a digital forensic examiner can browse it in Windows Explorer.
VSSADMIN displays available Volume Shadow Copies on a mounted forensic image. MKLINK creates a symbolic link to the shadow copy, so a digital forensic examiner can browse it in Windows Explorer.
18.222.67.251