Back home
中文
H7 / SECURITY RESEARCH NOTES

Stopping the Windows Volume Shadow Copy Service with PowerShell

Environment

IPHOSTNAMENOTE
10.10.10.88win10_dqyLab host

Reproduction Project

View the Volume Shadow Copy service status

Get-Service -Name VSS | Out-String;

Start the Volume Shadow Copy service

  • PowerShell must be started with administrator privileges to start a Windows system service.
Start-Service -Name VSS;

Stop the Volume Shadow Copy service

Stop-Service -Name VSS;