Using Virtualization in Internal Forensic Training and Assessment

The field of forensics requires continual, on-the-job training in new devices, techniques, and file systems. Virtual environments offer unique advantages in digital forensics investigation. This paper will explore the ways information security professionals can use virtualized environments and simulation to reconstruct a sample event or device, distribute them throughout a team, and manage them as a tool to provide small scale training and assessment to forensic employees or teams.