Support for snapshot description (custom name for the restore point)? about libvshadow HOT 6 CLOSED

Windows UI for system restoring:

from libvshadow.

Are there plans to add the ability to retrieve a snapshot description that is set by the user when creating a restore point?

Not at the moment. Are you sure these are part of the volume layer data structures? Or is this operating system level information stored elsewhere, such as Windows Registry?

from libvshadow.

Are you sure these are part of the volume layer data structures?

No, I am not sure. But the presence of a snapshot identifier in the discovered name structure indicates a relationship between the snapshot (namely the Store Information structure) and Name structure (similar to the relationship between Volume Shadow Snaphots structures).

Or is this operating system level information stored elsewhere, such as Windows Registry?

That is a good idea! I will think about it.

One of my goals is to find the names of the snapshots in the E01 image containing NTFS. Even if the names are in the Windows Registry, they should be in the captured disk image (image E01). I need to find information about the offset where the Name structure is located (just as there are Descriptor List offsets, Catalog offsets, and many other offsets in your specification).

from libvshadow.

Even if the names are in the Windows Registry, they should be in the captured disk image (image E01).

Not necessarily, volume shadow and restore points are complex sub systems. The on volume structures (volsnap) is only one part of this.

Note that anything outside the volume structures is out of scope for this project

from libvshadow.

Thanks for the reply! I will try to investigate the snapshot naming structure at my leisure.

from libvshadow.

I'll close this issue for now then and let me know if you found indications that the information is stored as part of the volume structures. We can always reopen.

from libvshadow.