VSCMount version 1.0.0.0
Author: Eric Zimmerman (saericzimmerman@gmail.com)
https://github.com/EricZimmerman/VSCMount
dl Source drive to look for Volume Shadow Copies (C, D:, or F:\ for example)
mp The base directory where you want VSCs mapped to
ud Use VSC creation timestamps (yyyyMMddTHHmmss.fffffff) in symbolic link names. Default is FALSE
debug Show debug information during processing
Examples: VSCMount.exe --dl C --mp C:\VssRoot --debug
Short options (single letter) are prefixed with a single dash. Long commands are prefixed with two dashes
Mount VSCs with ease!
All of Eric Zimmerman's tools can be downloaded here.
Open Source Development funding and support provided by the following contributors:
- SANS Institute and SANS DFIR.
- Tines