Virtualization and Forensics

Description

Virtualization creates new and difficult challenges for forensic investigations. Operating systems and applications running in virtualized environments often leave few traces, yielding little evidence with which to conduct an investigation.

Virtualization and Forensics offers an in-depth view into the world of virtualized environments and the implications they have on forensic investigations. Part I explains the process of virtualization and the different types of virtualized environments. Part II details how virtualization interacts with the basic forensic process, describing the methods used to find virtualization artifacts in dead and live environments as well as identifying the virtual activities that affect the examination process. Part III address advanced virtualization issues, such as the challenges of virtualized environments, cloud computing, and the future of virtualization. After reading this book, you'll be equipped to conduct investigations in these environments with confidence.

* Gives you the end-to-end knowledge needed to identify server, desktop, and portable virtual environments, including: VMware, Parallels, Microsoft, and Sun
* Covers technological advances in virtualization tools, methods, and issues in digital forensic investigations
* Explores trends and emerging technologies surrounding virtualization technology

CONTENTS:

PART 1 VIRTUALIZATION Chapter 1 How Virtualization Happens Chapter 2 Server Virtualization Chapter 3 Desktop Virtualization Chapter 4 Portable Virtualization, Emulators, and Appliances

PART 2 FORENSICS Chapter 5 Investigating Dead Virtual Environments Chapter 6 Investigating Live Virtual Environments Chapter 7 Finding and Imaging Virtual Environments

PART 3 ADVANCED VIRTUALIZATION Chapter 8 Virtual Environments and Compliance Chapter 9 Virtualization Challenges Chapter 10 Cloud Computing and the Forensic Challenges Chapter 11 Visions of the Future: Virtualization and Cloud Computing Appendix: Performing Physical-to-Virtual and Virtual-to-Virtual Migrations