A Logo

Feel free to include my content in your page via my
RSS feed

Help Irongeek.com pay for
bandwidth and research equipment:

Search Irongeek.com:

Affiliates:
Irongeek Button
Social-engineer-training Button

Help Irongeek.com pay for bandwidth and research equipment:

paypalpixle


Forensic Artifacts of Host-Guest Interaction in the VMware Environment - Kurt Aubuchon (ShowMeCon 2015) (Hacking Illustrated Series InfoSec Tutorial Videos)

Forensic Artifacts of Host-Guest Interaction in the VMware Environment
Kurt Aubuchon
ShowMeCon 2015
http://www.showmecon.com

As virtualization becomes more and more prevalent in both corporate and home use, the forensic examination of virtual machines and their hosts is increasingly important. Too often, the examination of a virtual machine is done in isolation, with the virtual hard drive treated essentially the same as an image of a physical machine. This talk will describe some significant artifacts of communication between the host and guest, and demonstrate how an in-depth examination of both host and guest can reveal a wealth of information about user activity. Topics to be covered in this talk include: - Artifacts of Guest Applications Left on the Host - Artifacts of Host-Guest File Copies - Artifacts of Guest-Host File Copies - Cross-Contamination of Unallocated Space Between the Guest and Host.

Bio: Kurt has been in the IT field for fifteen years, including ten years devoted to information security.ÿ He has experience in a range of organizations, including healthcare, higher education, and Fortune 25 enterprises.ÿ His experience in forensics and incident response ranges from investigating suspected insider abuse to managing major breach events.ÿ Kurt has previously spoken on the topic of incident management at SecureWorld Expo and BSIDES-MO, and he has been a guest lecturer of graduate information security courses at St. Louis University for the past five years.ÿ Kurt holds the CISSP, CCE, CISM, C|EH, and C|HFI certifications and an MBA.ÿ He is currently a Global Incident Manager at IBM, and he lives in Columbia, Missouri.

Back to ShowMeCon 2015 video list

Printable version of this article

15 most recent posts on Irongeek.com:


If you would like to republish one of the articles from this site on your webpage or print journal please contact IronGeek.

Copyright 2016, IronGeek
Louisville / Kentuckiana Information Security Enthusiast