Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Windows VSS: difference between two shadow copies?

Tags:

I'm using the VSS api to create some shadow copies of a volume and then access them using their UNC paths.
Is it possible to get a list of some sort of just the things that changed between two consecutive shadows?

The obvious way of doing this is to go over all of the files in the volume and check for changes but there must he an easier way to do this since one of the key features of VSS is that it saves deltas of information and only saves what is changed.

like image 624
shoosh Avatar asked Jul 03 '12 14:07

shoosh


People also ask

How does VSS shadow copy work?

Shadow Copies for Shared Folders uses the Volume Shadow Copy Service to provide point-in-time copies of files that are located on a shared network resource, such as a file server. With Shadow Copies for Shared Folders, users can quickly recover deleted or changed files that are stored on the network.

Do I need volume shadow copy?

Shadow Volume Copies have been a feature since Windows Vista that allows snapshots, or backups, of your files to be saved even when the files are currently in use. These snapshots will attempt to be created every day and allows you to restore documents to previous versions or even to restore them if they were deleted.

What are shadow copies of drives?

A shadow copy is a snapshot of a volume that duplicates all of the data that is held on that volume at one well-defined instant in time.


1 Answers

Use a third party software like WinMerge with the shadow copy UNC paths http://winmerge.org/

This will provide a GUI for comparisons

For example, use "C:\", vs "\\localhost\C$\@GMT-2017.08.24-18.07.46"

Of course, enter a valid UNC path to coincide with the date and time of a shadow copy.

like image 136
Jim Lutz Avatar answered Oct 24 '22 02:10

Jim Lutz