Diskshadow.exe is a tool that exposes the functionality offered by the volume shadow copy Service (VSS).
Execute commands using diskshadow.exe from a prepared diskshadow script.
diskshadow.exe /s {PATH:.txt}
Use diskshadow to exfiltrate data from VSS such as NTDS.dit
Execute commands using diskshadow.exe to spawn child process
diskshadow> exec {PATH:.exe}
Use diskshadow to bypass defensive counter measures