Analyzing the Impact of a Virtual Machine on a Host Machine

Greg Dorn; Chris Marberry; Scott Conrad; Philip Craiger

doi:10.1007/978-3-642-04155-6_5

Analyzing the Impact of a Virtual Machine on a Host Machine

Greg Dorn, Chris Marberry, Scott Conrad, Philip Craiger

University of Central Florida

Research output: Chapter in Book/Report/Conference proceeding › Chapter

Abstract

As virtualization becomes more prevalent in the enterprise and in personal computing, there is a great need to understand the technology as well as its ramifications for recovering digital evidence. This paper focuses on trace evidence related to the installation and execution of virtual machines (VMs) on a host machine. It provides useful information regarding the types and locations of files installed by VM applications, the processes created by running VMs and the structure and identity of VMs, ancillary files and associated artifacts

Original language	American English
Title of host publication	Advances in Digital Forensics V
DOIs	https://doi.org/10.1007/978-3-642-04155-6_5
State	Published - 2009
Externally published	Yes

Keywords

virtualization
virtual machine
VMware
parallels

Disciplines

Computer and Systems Architecture
Forensic Science and Technology

Access to Document

10.1007/978-3-642-04155-6_5License: Unspecified

analys impact virt machi DornMCC09.pdfFinal published version, 867 KBLicense: Unspecified

Cite this

@inbook{22d1d06dea1c489bbebe1ca8bcb6339a,

title = "Analyzing the Impact of a Virtual Machine on a Host Machine",

abstract = " As virtualization becomes more prevalent in the enterprise and in personal computing, there is a great need to understand the technology as well as its ramifications for recovering digital evidence. This paper focuses on trace evidence related to the installation and execution of virtual machines (VMs) on a host machine. It provides useful information regarding the types and locations of files installed by VM applications, the processes created by running VMs and the structure and identity of VMs, ancillary files and associated artifacts",

keywords = "virtualization, virtual machine, VMware, parallels",

author = "Greg Dorn and Chris Marberry and Scott Conrad and Philip Craiger",

year = "2009",

doi = "10.1007/978-3-642-04155-6_5",

language = "American English",

booktitle = "Advances in Digital Forensics V",

}

TY - CHAP

T1 - Analyzing the Impact of a Virtual Machine on a Host Machine

AU - Dorn, Greg

AU - Marberry, Chris

AU - Conrad, Scott

AU - Craiger, Philip

PY - 2009

Y1 - 2009

N2 - As virtualization becomes more prevalent in the enterprise and in personal computing, there is a great need to understand the technology as well as its ramifications for recovering digital evidence. This paper focuses on trace evidence related to the installation and execution of virtual machines (VMs) on a host machine. It provides useful information regarding the types and locations of files installed by VM applications, the processes created by running VMs and the structure and identity of VMs, ancillary files and associated artifacts

AB - As virtualization becomes more prevalent in the enterprise and in personal computing, there is a great need to understand the technology as well as its ramifications for recovering digital evidence. This paper focuses on trace evidence related to the installation and execution of virtual machines (VMs) on a host machine. It provides useful information regarding the types and locations of files installed by VM applications, the processes created by running VMs and the structure and identity of VMs, ancillary files and associated artifacts

KW - virtualization

KW - virtual machine

KW - VMware

KW - parallels

U2 - 10.1007/978-3-642-04155-6_5

DO - 10.1007/978-3-642-04155-6_5

M3 - Chapter

BT - Advances in Digital Forensics V

ER -