ABSTRACT

The field of digital investigations is an exciting area to

be involved in. This area combines many disciplines

(e.g., computer science, criminalistics, engineering, law,

psychology, information technology). One of the more

fascinating and probably frustrating components of digital

investigations is the “technology” itself. Investigations

that involve technology are inherently cursed with the

need for all those involved (e.g., investigators, lawyers,

judges) to keep up with the dynamic and seemingly con-

stant changes that technology brings. Just as we get

comfortable with the latest change or modification, along

comes something new, or in the context of what we will

be discussing-virtualization-something old reappears

that so predates the field that it appears to be new, and

therefore brings about a minor revolution or paradigm

shift.