From 164c80d496059f2f672c99ed65a05b868d05d320 Mon Sep 17 00:00:00 2001 From: Tod Beardsley Date: Wed, 4 Jan 2012 12:02:25 -0600 Subject: [PATCH] Adding a comment doc to the shadowcopy lib. Citing Tim Tomes and Mark Baggett --- lib/msf/core/post/windows/shadowcopy.rb | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/lib/msf/core/post/windows/shadowcopy.rb b/lib/msf/core/post/windows/shadowcopy.rb index 81ae34919b..d612562e9d 100644 --- a/lib/msf/core/post/windows/shadowcopy.rb +++ b/lib/msf/core/post/windows/shadowcopy.rb @@ -5,9 +5,11 @@ module Msf class Post module Windows +# Based on the research from Tim Tomes and Mark Baggett, at +# http://pauldotcom.com/2011/11/safely-dumping-hashes-from-liv.html module ShadowCopy - include Msf::Post::Windows::WindowsServices + include Msf::Post::Windows::WindowsServices def get_vss_device(id) result = get_sc_param(id,'DeviceObject')