|
|
|
|
|
|
by bgm1975
997 days ago
|
|
|
If the feds have physical access and considering the high likelihood that these are VMs and not physical, it would be a whole lot easier to get the hypervisor to just snapshot the VM w/ its memory and perform forensics against that file(s). |
|
|