tag:blogger.com,1999:blog-9518042.post8685548801001500858..comments2024-03-19T07:46:20.437-05:00Comments on Windows Incident Response: Accessing Volume Shadows, re-revisitedUnknownnoreply@blogger.comBlogger3125tag:blogger.com,1999:blog-9518042.post-66125710279217637682019-02-12T15:03:15.015-05:002019-02-12T15:03:15.015-05:00Thanks, it does.
Do you have a link to the tool...Thanks, it does. <br /><br />Do you have a link to the tool? An example of a command line?<br /><br />Thanks.H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-44496379799548951172019-02-12T15:00:53.404-05:002019-02-12T15:00:53.404-05:00Just an update - the old Garner FAU dd.exe tool st...Just an update - the old Garner FAU dd.exe tool still works in Windows 10 for the purpose of imaging VSCs as a physical disk dd image instead of just a logical like some of the other mentioned methods. Hope this helps.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-9518042.post-81577553355603696542018-09-06T22:16:24.077-05:002018-09-06T22:16:24.077-05:00This comment has been removed by a blog administrator.mmarcosnoreply@blogger.com