Skip to main content

Analyzing the impact of a virtual machine on a host machine

Citations of this article
Mendeley users who have this article in their library.

This artice is free to access.


As virtualization becomes more prevalent in the enterprise and in personal computing, there is a great need to understand the technology as well as its ramifications for recovering digital evidence. This paper focuses on trace evidence related to the installation and execution of virtual machines (VMs) on a host machine. It provides useful information regarding the types and locations of files installed by VM applications, the processes created by running VMs and the structure and identity of VMs, ancillary files and associated artifacts.




Dorn, G., Marberry, C., Conrad, S., & Craiger, P. (2009). Analyzing the impact of a virtual machine on a host machine. In IFIP Advances in Information and Communication Technology (Vol. 306, pp. 69–81). Springer New York LLC.

Register to see more suggestions

Mendeley helps you to discover research relevant for your work.

Already have an account?

Save time finding and organizing research with Mendeley

Sign up for free