Windows Forensics Cookbook
上QQ阅读APP看书,第一时间看更新

Browsing and copying files from VSCs on a live system with ShadowCopyView