Copy-ForensicFile
SYNOPSIS
{{Fill in the Synopsis}}
SYNTAX
ByPath
Copy-ForensicFile [-Path] <String> [-Destination] <String>
ByIndex
Copy-ForensicFile [-VolumeName <String>] [-Index] <Int32> [-Destination] <String>
DESCRIPTION
{{Fill in the Description}}
EXAMPLES
Example 1
PS C:\> {{ Add example code here }}
{{ Add example description here }}
PARAMETERS
-Destination
{{Fill Destination Description}}
Type: String
Parameter Sets: (All)
Aliases:
Required: True
Position: 1
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
-Index
{{Fill Index Description}}
Type: Int32
Parameter Sets: ByIndex
Aliases:
Required: True
Position: 0
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
-Path
{{Fill Path Description}}
Type: String
Parameter Sets: ByPath
Aliases: FullName
Required: True
Position: 0
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
-VolumeName
{{Fill VolumeName Description}}
Type: String
Parameter Sets: ByIndex
Aliases:
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
INPUTS
None
OUTPUTS
System.Object
NOTES
RELATED LINKS
https://powerforensics.readthedocs.io/en/latest/cmdlethelp/#copy-forensicfile http://www.invoke-ir.com/2016/02/copying-locked-files-with-powerforensics_5.html https://cqureacademy.com/blog/forensics/how-to-recover-deleted-files-from-the-drive