vsc-forensic
Windows Volume Shadow Copy forensic library — reads VSS store/catalog structures, enumerates shadow copies, reconstructs each snapshot's point-in-time volume view (copy-on-write read-back), and grades deletion/timeline anomalies as forensicnomicon findings. Panic-free, fuzzed, Tier-1 validated against libvshadow.
View on Github
Activity
- Latest release
- 1mo ago
- Total releases
- 5
- Cadence
- ~5 days
- Last 12 months
- 5
Reach
- Downloads
- 90
- Stars
- 1
Details
- License
- Apache-2.0
- First release
- Jul 08, 2026
Releases
| Version | Released | |
|---|---|---|
0.2.2
patch
| ||
0.2.1
unknown
| ||
0.2.0
unknown
| ||
0.1.1
unknown
| ||
0.1.0
unknown
|