Notifications
Clear all
General (Technical, Procedural, Software, Hardware etc.)
1
Posts
1
Users
0
Reactions
333
Views
Topic starter
22/12/2010 8:07 pm
I've looked but haven't seen this posted anywhere on FF, so…
I've had a run of cases where I've had to examine Volume Shadow Copies. Guides that I've seen to date mostly state that Guidance's PDE module is the only one that virtually mounts evidence files and includes the Shadows.
Not that I want to take business away from Guidance, but I've found that Paraben's free version of P2Explorer also does this, and so far has worked an absolute treat for me.
If this HAS been posted somewhere else and I've missed it - sorry.