Various systems and methods for modifying the contents of a snapshot after the snapshot has been created are disclosed. One such method involves attaching a volume filter driver to a snapshot volume. The method detects one or more modifications intended for data in a read-only snapshot. Upon detecting the modification(s) intended for data in the read-only snapshot, the method performs a write operation, which includes the modification(s), to a secondary storage device instead of a primary storage device.