Windows Delete Shadow Copies
Planted .
Last tended .
## List
vssadmin list shadows
### List with powershell
Get-WmiObject Win32_Shadowcopy
## Delete with powershell
Get-WmiObject Win32_Shadowcopy | ForEach-Object {$_.Delete();}
references:
An Underrated Technique to Delete Volume Shadow Copies - DeviceIoControl (picussecurity.com)
Paths into this note
1 note leads here
-
Windows delete shadow copies