Access Changed Files on VSS Copy on Write Disk Image
-
This is hard to describe. Have a disk image taken from a VM that had VSS copy on writes turned on. Is there a way to access it from the disk image to see the data that has changed since the snap was made?
-
Mount the disk image on Windows Server instance, from the mounted disk drive, go to Properties and then Previous Versions?
-
@black3dynamite said in Access Changed Files on VSS Copy on Write Disk Image:
Mount the disk image on Windows Server instance, from the mounted disk drive, go to Properties and then Previous Versions?
That's what I thought. But it just seemed too easy, lol.
-
And don't forget, you can grab those files without the gui by using DosDev to mount the VSS.
-
@scottalanmiller said in Access Changed Files on VSS Copy on Write Disk Image:
@black3dynamite said in Access Changed Files on VSS Copy on Write Disk Image:
Mount the disk image on Windows Server instance, from the mounted disk drive, go to Properties and then Previous Versions?
That's what I thought. But it just seemed too easy, lol.
Lol, anything that appears with Microsoft as easy should work but emphasis on "should"
-
@dbeato said in Access Changed Files on VSS Copy on Write Disk Image:
@scottalanmiller said in Access Changed Files on VSS Copy on Write Disk Image:
@black3dynamite said in Access Changed Files on VSS Copy on Write Disk Image:
Mount the disk image on Windows Server instance, from the mounted disk drive, go to Properties and then Previous Versions?
That's what I thought. But it just seemed too easy, lol.
Lol, anything that appears with Microsoft as easy should work but emphasis on "should"
Emphasis with "assume" too. lol
