doi: 10.7763/IJMO.2012.V2.205
Digital Forensic Investigation for Virtual Machines
Smita V. Khangar
,
,
- G. H. Raisoni College of Engineering
Abstract
Fundamental approach for digital forensic is staticanalysis. It involves the analysis of data preserved onpermanent storage media. When a system is examined by thestatic analysis, it does not provide the complete scenario of theevent. Thus a virtual machine created from the static data tohelp in collecting the evidence. Introduction of virtual machineenables a much simpler way of investigation. Use ofvirtualization technology is continuously growing incommercial area. Therefore, instead of using virtual machinesfor forensic examination virtual enviourment needs to beexamined itself. Investigation can be done without violating thedata collected as evidence since virtual desktop can be made asforensic platform. This paper discuss about the investigation invirtual enviourment. However investigation in virtualenviourment is simpler than the investigating physicalenviourment.
Keywords
- Computer evidence
- digital forensic
- virtualdisk image
- virtualization
- VMware
How to Cite
Smita V. Khangar, G. H. R. C. E. Nagpur, and Rajiv V. Dharaskar, "Digital Forensic Investigation for Virtual Machines," International Journal of Modeling and Optimization, vol. 2, no. 6, pp. 663-666, 2012. https://doi.org/ 10.7763/IJMO.2012.V2.205
Copyright & License
Copyright © 2012 by the authors. This is an open access article distributed under the Creative Commons Attribution License which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited (CC BY 4.0).