Question:
"Virtual Machine Forensics"
• Determine what you perceive to be the greatest challenge when dealing with virtual machines from a system forensics perspective. Provide a rationale with your response.
• Determine how virtual machines can be used as both useful forensic tools and tools to thwart forensic investigations. Decide which of these two uses of virtual machines you perceive is more common and justify your answer.