Investigación forense de discos duros virtuales

Abstract

The study was developed in the field of forensic computing in virtualized infrastructures, specifically in their storage units. Initially the definition of computer forensics was studied, its importance, its uses and applications, existing laws in Ecuador related to cybercrime, and how the above items are taken into account when making a digital forensics in virtual storage units. Subsequent a study of the state of the art about digital forensics and methodologies used at the time was performed, and a study of standards relating to computer forensics was developed. After completion of the study a methodology of digital forensics was proposed, where unlike the traditional model takes into account virtual machines and storage units to analize. Finally it proceeded to propose a test environment where the proposed methodology was applied and consequently obtain results which were analyzed by categories applied to virtual environments.