Forensic Acquisition and Analysis of Deleted Vmware Virtual Machine
Ankita Sojitra · International Journal for Research in Applied Science and Engineering Technology · 2019
Virtual machine forensics plays very important role now a days. It is a one type of software that behaves like a physical computer. VMware Workstation allows users to set up and use virtual machines simultaneously with the actual machine on a single physical machine. Perhaps the most pressing concern in any digital investigation is the issue of virtual machine volatility.The complexities of virtual hard drives for data recovery are not fully addressed by the current digital forensic tools.For this reason, it is necessary to investigate ways of capturing evidence other than using current forensic digital methods.Forensics tools are not able to recover a deleted VMware files.In this report to show how to find deleted VMware from the existing system and also find how to get back that local deleted files from the VMware machine.