ABSTRACT
The field of digital investigations is an exciting area to
be involved in. This area combines many disciplines
(e.g., computer science, criminalistics, engineering, law,
psychology, information technology). One of the more
fascinating and probably frustrating components of digital
investigations is the “technology” itself. Investigations
that involve technology are inherently cursed with the
need for all those involved (e.g., investigators, lawyers,
judges) to keep up with the dynamic and seemingly con-
stant changes that technology brings. Just as we get
comfortable with the latest change or modification, along
comes something new, or in the context of what we will
be discussing-virtualization-something old reappears
that so predates the field that it appears to be new, and
therefore brings about a minor revolution or paradigm
shift.