Added support for T1490 creating shadow copies in Windows 10+

[emilemarty]

Support for creating shadow copies in Windows 10+

Details:

Added a get-prereq command to create a shadow copy using WMI, which works on Windows 10.

Testing:

Prereq command tested on Windows 10 Enterprise N:

> wmic shadowcopy call create Volume='C:\'
Executing (Win32_ShadowCopy)->create()
Method execution successful.
Out Parameters:
instance of __PARAMETERS
{
        ReturnValue = 0;
        ShadowID = "{7A7524F3-D1AA-4B44-A39E-C8AEC5724BA1}";
};

Associated Issues:

[clr2of8]

Thank you for your first-time contribution. Keep it up! Don't forget to claim your free Atomic Red Team t-shirt