InstallWatch Windows-based filesystem comparator tool 타임포인트를 통해 파일시스템과 시스템 레지스트의 정보를 비교 not updated http://www.epsilonsquared.com/ 직접다운로드

SANS DFIR http://digital-forensics.sans.org/

http://www.forensicfocus.com/

How Volume Shadow Copy Service Works http://technet.microsoft.com/en-us/library/cc785914(WS.10).aspx How Volume Shadow Copy Service Works 146 out of 205 rated this helpful - Rate this topic Updated: March 28, 2003 Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2 How Volume Shadow Copy Service Works In this section Methods for Cre..