clockfort

VirtualBox is a powerful free machine virtualization application, but lacks some functionality useful for forensic analysis of guest virtual machines. The objective of this application is to add easily accessible and useable memory and disk dumps of live systems. Live system imaging is an ... [More] increasingly important part of computer forensic investigation, as it offers the investigator access to temporary information not written to the hard disk that would be lost if the machine were just turned off and examined. [Less]