A computer-implemented method of generating backups of a protected storage system from protected data in a recovery system (150, 270), the method comprising: protecting data in the recovery system (150, 270), wherein the recovery system (150, 270) comprises a target disk (120, 250) configured to store a replica of the protected storage system from a predetermined time point and a journal (110, 240) comprising data and metadata of write operations to the protected storage system that occurred after the predetermined time point; obtaining data related to a write operation in the protected storage system, and metadata related to the obtained data; maintaining the journal (110, 240) by: storing a copy of the obtained data in a content entry; storing at least a portion of the obtained metadata in a metadata entry; and associating the metadata entry with the content entry; periodically generating replicas of the protected storage system from the recovery system (150, 270), wherein generating a replica comprises: obtaining a time value for which the replica of the protected storage system is to be provided; examining metadata entries in the journal (110, 240) to identify entries related to last write operations that occurred before the time value; generating a region-locator structure, wherein the region-locator structure includes a list of addresses and, for each address in the list of addresses, generating a reference to a content entry that includes data of the last write operation to the address; using the region-locator structure to produce the replica of data stored on the protected storage system by: copying data from content entries in the journal (110, 240) for all of the addresses in the region-locator; and copying data from the target disk (120, 250) for other addresses of the protected storage system; and storing the replicas as the backups. protecting data in the recovery system (150, 270), wherein the recovery system (150, 270) comprises a target disk (120, 250) configured to store a replica of the protected storage system from a predetermined time point and a journal (110, 240) comprising data and metadata of write operations to the protected storage system that occurred after the predetermined time point; obtaining data related to a write operation in the protected storage system, and metadata related to the obtained data; maintaining the journal (110, 240) by: storing a copy of the obtained data in a content entry; storing at least a portion of the obtained metadata in a metadata entry; and associating the metadata entry with the content entry; storing a copy of the obtained data in a content entry; storing at least a portion of the obtained metadata in a metadata entry; and associating the metadata entry with the content entry; periodically generating replicas of the protected storage system from the recovery system (150, 270), wherein generating a replica comprises: obtaining a time value for which the replica of the protected storage system is to be provided; examining metadata entries in the journal (110, 240) to identify entries related to last write operations that occurred before the time value; generating a region-locator structure, wherein the region-locator structure includes a list of addresses and, for each address in the list of addresses, generating a reference to a content entry that includes data of the last write operation to the address; using the region-locator structure to produce the replica of data stored on the protected storage system by: copying data from content entries in the journal (110, 240) for all of the addresses in the region-locator; and copying data from the target disk (120, 250) for other addresses of the protected storage system; obtaining a time value for which the replica of the protected storage system is to be provided; examining metadata entries in the journal (110, 240) to identify entries related to last write operations that occurred before the time value; generating a region-locator structure, wherein the region-locator structure includes a list of addresses and, for each address in the list of addresses, generating a reference to a content entry that includes data of the last write operation to the address; using the region-locator structure to produce the replica of data stored on the protected storage system by: copying data from content entries in the journal (110, 240) for all of the addresses in the region-locator; and copying data from the target disk (120, 250) for other addresses of the protected storage system; copying data from content entries in the journal (110, 240) for all of the addresses in the region-locator; and copying data from the target disk (120, 250) for other addresses of the protected storage system; and storing the replicas as the backups.