What do you mean by "offline parser"? How would this be useful?
I envisaged being able to break out the contents of the shadow copies without requiring to mount the image or have a win 7 box. The benefit would come when looking at numerous shadow copies from multiple systems - it would just be a time saver. Sometimes vss work is targeted, you know the files you expect to be able to pull out etc. You can isolate the specific sc and you can extract, for example, the folder/s you want. Other times its useful to be able to compare all changes over the life time of the available shadow copies, its definitely possible to do this without such a tool, its just time consuming creating all those images.
Offline parsing is what libvshadow does. It has a mount tool for ease of access, but if you want you could use just the library to get access to the different shadow volumes.
There is much to be gained from an offline parser, e.g. research into recovery of inter-snapshot changes.
Offline parsing is what libvshadow does. It has a mount tool for ease of access, but if you want you could use just the library to get access to the different shadow volumes.
There is much to be gained from an offline parser, e.g. research into recovery of inter-snapshot changes.
Sounds great, i'll check it out thanks