Vshadow Logo

Vshadow

0
Free
Visit Website

Vshadow (vshadow.exe) is a command line utility for managing volume shadow copies included within the Windows SDK and signed by Microsoft. It allows for executing scripts and invoking commands in support of volume shadow snapshot management, which can be abused for privileged-level evasion, persistence, and file extraction. The tool supports the -exec parameter for executing binaries or scripts without command arguments.

FEATURES

ALTERNATIVES

Analyzing WiFiConfigStore.xml file for digital forensics on Android devices.

A collection of PowerShell modules for artifact gathering and reconnaissance of Windows-based endpoints.

A powerful OSINT tool for creating custom templates for data extraction and analysis

A comprehensive incident response tool for Windows computers, providing advanced memory forensics and access to locked systems.

A software utility with forensic tools for smartphones, offering powerful data extraction and decoding capabilities.

ForensicMiner, Redefine DFIR Automations

IE10Analyzer can parse and recover records from WebCacheV01.dat, providing detailed information and conversion capabilities.

Diffy is a digital forensics and incident response (DFIR) tool developed by Netflix's Security Intelligence and Response Team (SIRT) for scoping compromises across cloud instances.