| Publisher | Universitat Trier | ||
|---|---|---|---|
| Format | 601.2KB PDF | Date added | 01 Jun 2007 |
| Topics | Hard Drives, Virtualization | ||
| Downloads | 113 | ||
This paper is a continuation of the authors previous work in which the author proposed an approach where two environments, conventional and virtual, are used independently in the forensic analysis of computer systems. The paper discusses the use of virtual environments in the analysis of USB flash drives in computer forensics investigations. After briefly introducing general concepts of a virtual environment and software tools the paper shows how this approach can be successfully used in the analysis phase of the computer forensics investigation of portable USB flash drives. It also shows why virtualisation technique can complement but not completely replace conventional methods of computer evidence analysis.
Did you find this white paper useful?
3 out of 9 users found this white paper useful
Related white papers
Inside An Innovation: Diskeeper® 2010 Performance Technology
Achieve greater system speed and efficiency than ever thought possible with a new breakthrough technology that prevents disk fragmentation before it happens. Every system, every network, every company suffers from the...
The Essentials Series: Why You Need to Defragment
Authored by Microsoft MVP Greg Shields, this tech report is a call to arms for Windows administrators, reminding them why defragmenting is so important. Everyone wants better system performance...
Best Practices in Index Maintenance - Fighting the Silent Performance Killers
Index fragmentation is a serious issue. It causes significant SQL Server performance issues, leading to loss of money and time. The problem is native tools alone aren't the solution to...
Why and How You Should Find and Fix Index Fragmentation
In a high-volume database you need frequent critical maintenance. If you skip this important task, index fragmentation may cause wasted space, inefficient I/O and poor performance. In this new Quest Software...
Protecting Digital Assets
Full Disk Encryption (FDE) is the safest way to protect digital assets, including both those of company as well as customers. If mobile devices such as laptops are stolen, FDE...
Dell Solid State Disk (SSD) Drives: Storage Solutions for Select PowerEdge Servers
Dell recently introduced the industry's fastest Enterprise class storage medium, Solid State Disk Drives (SSDs) in select Power Edge servers. Solid State, the use of NAND Flash as a storage...
Improving BIOS Debugging Using USB 2.0 Methods: Moving Beyond POST Checkpoints
The Basic Input/Output System (BIOS) on modern computers, whether based on legacy BIOS standards or Unified EFI (UEFI), send debug checkpoints during the initialization and boot process. Checkpoints are valuable...
