VSCMount
Command Line Interface
VSCMount version 1.0.0.0
Author: Eric Zimmerman (saericzimmerman@gmail.com)
https://github.com/EricZimmerman/VSCMount
dl Source drive to look for Volume Shadow Copies (C, D:, or F:\ for example)
mp The base directory where you want VSCs mapped to
ud Use VSC creation timestamps (yyyyMMddTHHmmss.fffffff) in symbolic link names. Default is FALSE
debug Show debug information during processing
Examples: VSCMount.exe --dl C --mp C:\VssRoot --debug
Short options (single letter) are prefixed with a single dash. Long commands are prefixed with two dashes
Documentation
Mount VSCs with ease!
Download Eric Zimmerman's Tools
All of Eric Zimmerman's tools can be downloaded here. Use the Get-ZimmermanTools PowerShell script to automate the download and updating of the EZ Tools suite. Additionally, you can automate each of these tools using KAPE!
Special Thanks
Open Source Development funding and support provided by the following contributors:
- SANS Institute and SANS DFIR.
- Tines