What is DiskShadow
Self-hosted Fuzzing-As-A-Service platform for continuous developer-driven fuzzing.
DiskShadow: A Tool for Volume Shadow Copy Service
DiskShadow.exe is a utility that provides access to the features of the Volume Shadow Copy Service (VSS). By default, DiskShadow operates through an interactive command interpreter, which is similar to the interfaces used in DiskRaid and DiskPart. Additionally, DiskShadow offers a scriptable mode for advanced users. This tool is available in Windows Server 2008, Windows Server 2012, and Windows Server 2019.
It allows for the creation, enumeration, and manipulation of volume shadow copies with additional insights
It enables the creation, enumeration, and manipulation of volume shadow copies. DiskShadow also offers features that support persistence and evasion, making it a valuable tool for offensive security operations. Indicators of Compromise (IOCs) for defensive measures include the creation of suspicious volume shadow copies and the use of DiskShadow for malicious activities. In this post, we will explore DiskShadow, outline its relevant features and capabilities for offensive opportunities, and identify IOCs for defensive considerations.
DiskShadow Reviews
No reviews yet.
