Magnet AXIOM scans a drive or an image for available Volume Shadow Copies and uses them as its evidence source. After it has processed all available data in the chosen shadow copies, it extracts forensic artifacts according to the choices made by the examiner.