Notifications
Clear all

VM Data Recovery

4 Posts
4 Users
0 Likes
460 Views
Vesalius
(@vesalius)
Posts: 66
Estimable Member
Topic starter
 

So I was wondering if removing a Kali Linux virtual machine workstation will be recoverable if the hard drive is removed and an image is grabbed off of it , for example using FTK imager or magnet software's such as a axiom or IEF. If it is possible how can I remove it quickly without it being recoverable?

 
Posted : 24/10/2017 9:51 am
AmNe5iA
(@amne5ia)
Posts: 173
Estimable Member
 

The fact you are trying to delete a Kali VM makes it appear you are trying to cover up some wrong doing.
Not quick, but use a secure wipe program to overwrite the VM's files before deleting them.

 
Posted : 24/10/2017 10:53 am
JaredDM
(@jareddm)
Posts: 118
Estimable Member
 

So I was wondering if removing a Kali Linux virtual machine workstation will be recoverable if the hard drive is removed and an image is grabbed off of it , for example using FTK imager or magnet software's such as a axiom or IEF. If it is possible how can I remove it quickly without it being recoverable?

Yes, we absolutely can and do recover data from deleted VMs. If you want to permanently destroy the data from a VM, you need to either wipe the VMDK file by overwriting the sectors it was stored in, or run an encrypted filesystem on the VM so when it's deleted the data is all scrambled.

 
Posted : 24/10/2017 5:57 pm
MDCR
 MDCR
(@mdcr)
Posts: 376
Reputable Member
 

The fact you are trying to delete a Kali VM makes it appear you are trying to cover up some wrong doing.

Either that or he/she works for one of the more "fun agencies" that is concerned with both hiding and finding evidence.

 
Posted : 31/10/2017 8:58 am
Share: