Paper about forenics on Virtual OS running on a Thumbdrive.

Performing Forensics on a Virtual OS on a Thumb Drive can be challenging.  This paper walks through some of the gotchas.

Tracing Forensic Artifacts from USB-Bound Computing Environments on Windows Hosts

Follow on Twitter: ITSECSAM