Virtual Machine Forensics

Name: Virtual Machine Forensics
Rating: 4.5 (159 reviews)

Conducting Forensics Investigation on Virtual Machines

Created byAfsaneh Javadi

Last updated 9/2020

English

English [Auto],

What you'll learn

Virtualization and virtual machin componenet, How to conduct forensics analysis of virtual machines

Course content

6 sections • 23 lectures • 1h 29m total length

Introduction1:52
An overview of Virtual machine forensics1:31
Provide an overview of virtual machine forensics, outlining the core concepts involved in investigating virtual environments.

What is a virtual Machine?2:01
What is a hypervisor?3:08
Most widely used hypervisors type 23:05
Identify the most widely used type 2 hypervisors and examine their role in virtual machine forensics.
How to install Virtual box?4:08
Install VirtualBox on Windows 10 by downloading from Oracle, running the installer as administrator, accepting defaults, and understanding a network adapter warning while creating multiple virtual machines.
How install VMWare?
Use following link to download the VMware workstation :
https://www.vmware.com/products/workstation-player/workstation-player-evaluation.html
Enabling Virtualization Technology2:55
Discover how enabling virtualization technology empowers forensic analysis of virtual machines, highlighting the role of virtualization features in collecting and preserving evidence.
Files Associated with VMWare7:21

Digital Forensics key terms-part 15:14
Learn key digital forensics terms and procedures, including digital investigations, search and seizure, search warrants, chain of custody, hashing to validate data, first responder, and forensic image acquisition.
Digital Forensics key terms-part 25:43
Explore essential digital forensics terms and evidence handling concepts, including custody forms, affidavits, line of authority, and verdicts used in virtual machine investigations.
Digital Forensics Key terms-part 32:17

Forensics toolkit or FTK imager2:35
How to install FTK imager?5:46
Install ftk imager by downloading via a form after submission, opening the emailed download link, running the installer, accepting the license, and launching the program to perform machine investigations.
OSforensics1:55
How to install OSforensics?5:54
Download OSForensics version 7.1 for 32- or 64-bit Windows, install from USB or local, and use a 30-day trial with 1 GB RAM, 200 MB disk space, and hashed sets.

Conducting an investigation with type to Hypervisors8:18
How acquire an Image of a VM8:56
Learn to acquire a VM image using VirtualBox and Ubuntu Linux, then use FTK Imager to create and verify the image hash for evidence.
Conducting an investigation-Detecting VMs on a host computer8:09
Conduct a host-based virtual machine forensics investigation by imaging the system, examining logs, registry entries, network adapters, and attached drives to detect virtual machines on the host and establish timelines.
Procedure for conducting a VM forensics Analysis1:28
Snapshots and Live acquisition0:01

Requirements

Some IT background-Be able to work with computer

Description

In this course you will learn about virtual machines, hypervisors, different type 2 hypervisors, installing VM on your machine. Files associated with popular hypervisors will be explained. Also you will be introduced to two powerful forensics tools FTK imager and OSForensics. You will learn how to install FTK imager and OSForensic. In addition you learn how to detect VMs on a suspect machine and finally how to conduct an investigation on a suspect machine.

Who this course is for:

Students interested in Cybersecurity and digital forensics field

Virtual Machine Forensics

What you'll learn

Explore related topics

Course content

Introduction2 lectures • 3min

What is a virtual Machine?7 lectures • 23min

An overview on Digital Forensics3 lectures • 13min

Digital Forensics Tools4 lectures • 16min

Investigation with type to Hypervisors5 lectures • 27min

Hands-on 12 lectures • 8min

Requirements

Description

Who this course is for: