File system point-in-time restore using recycle bin and version history

Non-transitory computer-readable medium storing instructions that, when executed by an electronic processor, perform a set of functions, the set of functions comprising:

• receiving a point-in-time for restoring a file system to;
• automatically retrieving entries from a change log representing changes made to items within the file system after the point-in-time to identify items deleted from the file system after the point-in-time, items created within the file system after the point-in time, items moved within the file system after the point-in-time, items copied within the file system after the point-in-time, items renamed within the file system after the point-in-time, and items with content modified after the point-in-time;
• and
• automatically processing the entries retrieved from the change log in reverse order to roll back the changes made to the items within the file system after the point-in-time and restore the file system to a state at the point-in-time, wherein processing the entries retrieved from the change log includes
• automatically restoring, from a recycle bin, the items deleted from the file system after the point-in-time,
• automatically deleting, from the file system, the items created within the file system after the point-in-time,
• automatically moving the items moved within the file system after the point-in-time to a location within the file system associated with the point-in-time,
• automatically deleting, from the file system, the items copied within the file system after the point-in-time,
• automatically renaming the items renamed within the file system after the point-in-time to a name associated with the point-in-time, and
• automatically restoring, from a version history, a version associated with the point-in-time for the items with content modified after the point-in-time.

A method of restoring a file system to a state at a point-in-time, the method comprising:

• creating an entry in a change log for each change made to the file system, each entry including an identifier of an item changed within the file system, a date and time the item was changed within the file system, and a type of change made to the item;
• receiving, with an electronic processor, the point-in-time;
• automatically, with the electronic processor, retrieving a set of entries from the change log representing changes made to items within the file system after the point-in-time to identify items deleted from the file system after the point-in-time, items created within the file system after the point-in time, items moved within the file system after the point-in-time, items copied within the file system after the point-in-time, items renamed within the file system after the point-in-time, and items with content modified after the point-in-time;
• and
• automatically processing, with the electronic processor, the entries retrieved from the change log in reverse order to automatically roll back the changes made to the items within the file system after the point-in-time and restore the file system to the state at the point-in-time, wherein automatically processing the entries retrieved from the change log includes
• automatically restoring, from a recycle bin, the items deleted from the file system after the point-in-time,
• automatically deleting, from the file system, the items created within the file system after the point-in-time,
• automatically moving the items moved within the file system after the point-in-time to a location within the file system associated with the point-in-time,
• automatically deleting, from the file system, the items copied within the file system after the point-in-time,
• automatically renaming the items renamed within the file system after the point-in-time to a name associated with the point-in-time, and
• automatically restoring, from a version history, a version associated with the point-in-time for the items with content modified after the point-in-time;
• and
• synchronizing the file system as restored to the state at the point-in-time to at least one user device.