Abstract: A system comprises one or more computer hosts each comprising one or more Central Processing Units, one or more file systems, a host operating system, and one or more memory locations, wherein said CPUs are operatively connected to said one or more memory locations and configured to perform one or more of: execute one or more software on a host OS, wherein said software is configured to create one or more snapshots of said one or more file systems, identify one of said snapshots as an originator snapshot, identify a second snapshot, determine differences between said second snapshot and said originator snapshot, determine one or more file system calls transforming said originator snapshot into said second snapshot based on said differences and store said one or more file system calls that transform said originator snapshot into said second snapshot in one or more of non-transitory storage and transitory storage.