public PartialViewResult MountShadowCopy(string computerName, string timestamp)
{
try
{
PSRemoting psr = new PSRemoting(computerName, config.FALCON_FORENSICS_USERNAME, config.FALCON_FORENSICS_PASSWORD, config.FALCON_FORENSICS_DOMAIN);
SystemRestore restore = new SystemRestore(psr);
ShadowCopy copy = restore.GetShadowCopyByTime(Convert.ToDateTime(timestamp));
restore.MountShadowCopyVolume(copy.DeviceObject + @"\");
return(BrowserRefresh(computerName, @"C:\shadow", copy.DeviceObject));
}
catch (Exception e)
{
Response.StatusCode = 500;
return(PartialView("_Error", e.Message));
}
}
