Chapter 5. Using Python for Virtualization Forensics
Currently, virtualization is one of the most trending concepts of modern IT. For forensic analysis, it introduces new challenges as well as new techniques.
In this chapter, we will show how virtualization introduces the following:
New attack vectors
New chances of gathering evidence
New targets for forensic analysis such as the virtualization layer
New sources for forensic data