Contribution to Book
Analyzing the Impact of a Virtual Machine on a Host Machine
Advances in Digital Forensics V
(2009)
Abstract
As virtualization becomes more prevalent in the enterprise and in personal computing, there is a great need to understand the technology as well as its ramifications for recovering digital evidence. This paper focuses on trace evidence related to the installation and execution of virtual machines (VMs) on a host machine. It provides useful information regarding the types and locations of files installed by VM applications, the processes created by running VMs and the structure and identity of VMs, ancillary files and associated artifacts
Keywords
- virtualization,
- virtual machine,
- VMware,
- parallels
Disciplines
Publication Date
2009
Editor
Gilbert Peterson and Sujeet Shenoi
Publisher
Springer
Series
IFIP Advances in Information and Communication Technology
ISBN
978-3-642-04154-9
DOI
https://doi.org/10.1007/978-3-642-04155-6_5
Publisher Statement
A paper from the 5th IFIP International Conference on Digital Forensics held at the National Center for Forensic Science in Orlando, Florida, January 26-28, 2009.
Citation Information
Greg Dorn, Chris Marberry, Scott Conrad and Philip Craiger. "Analyzing the Impact of a Virtual Machine on a Host Machine" New York, NYAdvances in Digital Forensics V Vol. 306 (2009) p. 69 - 81 Available at: http://works.bepress.com/john_craiger/7/