Digital forensics on a virtual machine
Juan Carlos Flores Cruz, Travis Atkison · 2011
This poster presents a four-phase investigation methodology to acquire, authenticate and analyze a virtual machine. During a simulated investigation, sensitive information about a suspect's activities was obtained from a virtual machine by applying the four-phase investigation methodology. This methodology can be used to investigate a suspect's virtual machine to identify and obtain evidence about a suspect's activities in a virtual machine.