This paper is a continuation of the authors previous work in which the author proposed an approach where two environments, conventional and virtual, are used independently in the forensic analysis of computer systems. The paper discusses the use of virtual environments in the analysis of USB flash drives in computer forensics investigations. After briefly introducing general concepts of a virtual environment and software tools the paper shows how this approach can be successfully used in the analysis phase of the computer forensics investigation of portable USB flash drives. It also shows why virtualisation technique can complement but not completely replace conventional methods of computer evidence analysis.
Did you find this white paper useful?
1 out of 5 users found this white paper useful
Related white papers
HP Notebook Hard Drive: Measures of Care, Diagnosis and Maintenance
HP has a passion to continuously improve upon the customer experience. This white paper explains the measures that HP is providing to its customers to reduce the risk of hard...
Assessing and Comparing HP Parallel SCSI and HP Small Form Factor Enterprise Hard Disk Drives in Server Environments
This paper provides guidance and best case-scenarios for customers when deciding to implement hp capacity Parallel SCSI (P-SCSI) or hp small form factor enterprise hard drive technology in enterprise server...
The New Foundation of Storage: Xiotech's Intelligent Storage Element
For the last several decades the underlying elements of data storage--disk drives, drive enclosures, and controllers--have remained more or less the same, and have been unable to keep pace with...
How File Fragmentation Occurs on Windows XP / Windows Server 2003
A while ago there was a little research project to find out exactly how fragmentation occurs on Windows XP. It was sparked by some users at a past trade show...
Defrag Myth Busters - What You Should Know
There are many serious misconceptions about fragmentation which, if believed, can lead to significant computer damage. Debunking these myths could save your system or network. Fragmentation is one of the...
TechNet Webcast: Optical Media in Windows Vista (Level 300)
This webcast provides an overview of some of the enhancements of using optical media in the Windows Vista operating system. It covers the new user interface for backing up and...
Symantec Backup Exec System Recovery 8: The Gold Standard in Complete Windows System Recovery
Symantec Backup Exec System Recovery 8 is the gold standard in complete Windows system recovery, allowing businesses and IT to recover from system loss or disaster in minutes--not hours or...
