Abstract: A method and system for creating a series of online snapshots for recovery purposes. A series of concurrent, overlapping snapshots (e.g., file snapshots or database file snapshots) may be created over a user-specified time interval at a user-specified frequency. Monitoring for a recovery indication may occur during the user-specified time interval. Once it is established that a “recovery” is necessary, a snapback procedure may be implemented to iteratively restore one or more pre-update snapshot images. Between restore iterations, testing to determine if the problem still exists may occur. When the testing of the data results in a determination that the problem is resolved, no further restores are necessary.