Backups & Data Resilience

What is Volume Shadow Copy?

Volume Shadow Copy Service (VSS) is a Windows feature that creates point-in-time snapshots of files, enabling local restore of previous versions. Ransomware routinely deletes these shadow copies to prevent quick, free recovery.

Because attackers target local recovery options first, organizations need independent, verified backups. Elastio confirms which of those recovery points are clean so recovery does not depend on artifacts the attacker can delete.

Last updated May 27, 2026

Related terms

Point-in-Time Recovery Clean Recovery Point

Related Elastio resources

SolutionRecovery Assurance Solution briefEnsuring Clean Recovery Points in a World of Sophisticated Ransomware BlogBy the Time You See Ransomware, Your Backups May Already Be Compromised

See how Elastio proves clean recovery

Elastio hunts for ransomware inside your live, replicated, and backup data and pinpoints the last recovery point proven clean.

Explore the platform Request a demo

Related questions

How can you be resilient against ransomware?Can ransomware infect backups?How do you protect backups from ransomware?Can ransomware infect encrypted backups?Can immutable backups still contain ransomware?Can ransomware infect cloud storage?

PreviousWhat are the 4 pillars of cyber resilience?NextHow can you be resilient against ransomware?