Backups & Data Resilience
What is Volume Shadow Copy?
Volume Shadow Copy Service (VSS) is a Windows feature that creates point-in-time snapshots of files, enabling local restore of previous versions. Ransomware routinely deletes these shadow copies to prevent quick, free recovery.
Because attackers target local recovery options first, organizations need independent, verified backups. Elastio confirms which of those recovery points are clean so recovery does not depend on artifacts the attacker can delete.
Last updated
Related terms
Prove your recovery
See the evidence behind the decision.
Pursuit investigates compromise and guides response. Hunt provides evidence to assess recovery candidates.