Explain how a hypervisor functions as software that runs virtual machines.
Explain how a hypervisor functions as software that runs virtual machines. Use Figure 10-1 to discuss the two types of hypervisors.
Research and discuss one of the following widely used type 2 hypervisors:
Parallels Desktop
KVM
Microsoft Virtual PC
VMware Workstation and Player
VirtualBox
Explain how and why an investigation involving VMs doesn’t differ much from a standard investigation. Include the recommended steps to take when conducting a forensic analysis of VMs.
Discuss methods for examining a VM. Include the process of making a copy of its forensic image and open the copy while it’s running.
Describe the process of using a VM to run forensic tools stored on USB drives. How could this be used in an investigation?
Explain the process for live acquisitions. How is it similar to or different from other system acquisitions?
Illustrate the differences between digital forensics and network forensics.
Describe the differences between a honeypot, honeynet, and a honeywall.
Answer preview to explain how a hypervisor functions as software that runs virtual machines.
321 words