Hypervisor Memory Forensics
SubVirt: implementing malware with virtual machines