Sajal Choudhary

Windows delete shadow copies

Last updated:

WINDOWS 

##  List
vssadmin list shadows

### List with powershell
Get-WmiObject Win32_Shadowcopy

## Delete with powershell
Get-WmiObject Win32_Shadowcopy |  ForEach-Object {$_.Delete();}

references:

An Underrated Technique to Delete Volume Shadow Copies - DeviceIoControl (picussecurity.com)

← Back to Til

1 Backlinks