View metadata, citation and similar papers at core.ac.uk brought to you by CORE provided by Embry-Riddle Aeronautical University Publications 2009 Analyzing the Impact of a Virtual Machine on a Host Machine Greg Dorn Chris Marberry Scott Conrad Philip Craiger University of Central Florida,
[email protected] Follow this and additional works at: https://commons.erau.edu/publication Part of the Computer and Systems Architecture Commons, and the Systems Architecture Commons Scholarly Commons Citation Dorn, G., Marberry, C., Conrad, S., & Craiger, P. (2009). Analyzing the Impact of a Virtual Machine on a Host Machine. Advances in Digital Forensics V, (). Retrieved from https://commons.erau.edu/publication/1000 This Conference Proceeding is brought to you for free and open access by Scholarly Commons. It has been accepted for inclusion in Publications by an authorized administrator of Scholarly Commons. For more information, please contact
[email protected]. Chapter 5 ANALYZING THE IMPACT OF A VIRTUAL MACHINE ON A HOST MACHINE Greg Dorn, Chris Marberry, Scott Conrad and Philip Craiger Abstract As virtualization becomes more prevalent in the enterprise and in per- sonal computing, there is a great need to understand the technology as well as its ramifications for recovering digital evidence. This paper focuses on trace evidence related to the installation and execution of vir- tual machines (VMs) on a host machine. It provides useful information regarding the types and locations of files installed by VM applications, the processes created by running VMs and the structure and identity of VMs, ancillary files and associated artifacts. Keywords: Virtualization, virtual machine, VMware, Parallels 1.