Analysis of VMware virtual machine in forensics and anti-forensics paradigm
Hammad Riaz, Mohammad Ashraf Tahir · 2018
Virtual machine is an emulation of physical computer system. It works as a normal computer and provides complete functionality of an Operating System to the user. With the advent of virtualization technology, the use of virtual machines has increased manifold. These are now used on large scale in modern data centers. So is its use on personal computers for work, study and research purpose. However, where there is any new technology for good purpose, there is always its illegitimate usage as well. This manuscript focusses on analysis of virtual machine in forensics and anti-forensics paradigm. Forensic analysis of virtual machine and particularly the analysis when anti-forensic measures are taken to hide or destroy the evidence in virtual machines is covered in this work.