References: - https://learn.microsoft.com/en-us/windows-server/storage/file-server/volume-shadow-copy-service - https://en.wikipedia.org/wiki/Shadow_Copy - https://github.com/libyal/libvshadow/blob/main/documentation/Volume%20Shadow%20Snapshot%20(VSS)%20format.asciidoc However, we probably want to reverse engineer this ourselves.