This issue occurs because of the way the Volume Shadow Copy driver (Volsnap.sys) manages the shadow copy files. If lots of shadow copy files are created on the disk volumes, the Volume Shadow Copy driver takes more time to process those shadow copy files when the system brings the disk volumes online. See ME945058 for information on solving this problem.
According to Microsoft: "This behavior occurs because drive letter mapping for the home folder succeeds and causes a conflict with the drive letter mapping for the physical disk". See ME303948 for more detailed information.
Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.
Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.