Glossary: Modern Vulnerabilities, Malware and Physical Attacks

vssadmin delete shadows

Also written: vssadmin delete shadows /all /quiet, vssadmin

A real Windows command that deletes all shadow copies without asking. Ransomware runs it before encrypting, so seeing it is an early warning.