Tools and techniques are provided for using a snapshot, not a full volume copy, to preserve deleted items when creating an image file with other items from a computer storage volume. One method classifies items as desired or not, enables snapshotting, then deletes undesired items, then creates a blockwise volume image in which the deleted items are not imaged, and finally disables snapshotting. Systems and configured storage media for imaging selected files and folders are also provided.