title: Windows registry files shadow copy
body: <p>I need to find all windows registry files on disk including backup registry data from windows shadow copy. The problem is I don't know where those files are located.</p>
  
  <p>In internet I found this command
  <code>vssadmin list shadowstorage</code>
  but it returns me this</p>
  
  <p><code>For volume: (C:)\\?\Volume{ba406d28-f092-11dc-b3d7-806e6f6e6963}\</code></p>
  
  <p><code>Shadow Copy Storage volume: (C:)\\?\Volume{ba406d28-f092-11dc-b3d7-806e6f6e6963}\</code></p>
  
  <p>What is this? Where those files are really located? How can I access them? If I scan harddrive for binary files with "regf" magic number in the beginning would it be enough to find all registry data?</p>
  
  <p><strong>ADDED</strong></p>
  
  <p>I created shortcut on one backup folder from folder properties (Previous Versions)
  Here is what shortcut is pointing to</p>
  
  <p><code>\\localhost\C$\@GMT-2012.04.12-00.13.21\Windows\System32\config</code></p>
  
  <p>Looks like it contains backup files, but is it possible to access it as a normal directory? How can I find those directories on hard drive?</p>
  
  <p>Thanks in advance.</p>