Windows 10: Macrium Reflect Incremental/Differential Curiosity

Is there any way to see what changed between the most recent image and the previous image?

I see the file size increase nearly daily when I have not always made any major changes to my system. I know Windows saves new logs daily, but sometimes the change is 10GB+ after very little use. A disk cleanup does not reduce the change, either, so I suspect something in system files is at work.

It would be interesting to track what files were updated/added between backups. Obviously, Macrium Reflect has that ability built in or it wouldn't be able to do the differential or incremental backups, but can users access that data?

:)

 

Queries about Backup

Are you using the inbuilt imaging software or a third party?

If inbuilt then eventually this is being removed by Microsoft so you will have to download a third party application - many users have

Macrium Reflect free, this does full & differential backups/images, incremental is available in the paid version but is worth the payment - it isn’t an annual subscription but a version subscription so it may be several years between versions/payment &
you can stay with the version purchased as it doesn’t run out.

 

System images

Yep give it a try it's a great free alternative

You can mount Reflect images and copy and paste a single file if you want too

It also does incremental or differential in the free version too I believe just not for business use that requires the paid version.

But it is more versatile and a lot faster than windows imaging plus it is more reliable which counts the most when you really have to restore an image

Edit Reflect free will do Differential images instead of Incremental.

 

The basic mechanism of how Macrium creates backup images would prevent a user from accessing the actual file changes, in that manner. Macrium (and others) does a changed sector backup. In other words, it is comparing the previous .mrimg image to the current partition to be backed up. Only sectors where the hash has changed are backup up in the incremental/differential. It is not "file" oriented, it is sector oriented. That's why 30GB can be created and verified in an image in < 10 minutes. It does not use the NTFS file system, it's down at the RAW level. This all applies to image backups, not the File Backup option. I'm sure I've left out some details, but because it doesn't use NTFS per se, there is no way to see individual changes.

Size differences can also occur due to the data being re-written to different sectors. Even though you may have not added or changed very much at all, any small change to the data in a sector, even 1 byte, will cause it to be included as a changed sector for backup.

Hope I didn't over-explain.