Abstract: The present invention comprises computing systems, computer readable media, and methods of protecting computing systems. Embodiments comprise defining a virtual volume, mounting the virtual volume, and processing write accesses. Processing write accesses comprises creating a virtual volume record in a virtual volume database associated with the write access and storing write data at a free location of a shadow cache. Embodiments may also include processing read accesses comprising comparing the read accesses to a virtual volume record to determine if a matching virtual volume record exists, reading data from the target volume if the matching virtual volume record is absent, and reading a data from the shadow cache if the matching virtual volume record is present. Embodiments may also comprise processing at least one virtual volume record upon the occurrence of an event of interest and includes copying a cache data segment from the shadow cache to the target volume.