Notifications
Clear all

VM Data Recovery

4 Posts
4 Users
0 Reactions
1,140 Views
Vesalius
(@vesalius)
Estimable Member
Joined: 9 years ago
Posts: 66
Topic starter  

So I was wondering if removing a Kali Linux virtual machine workstation will be recoverable if the hard drive is removed and an image is grabbed off of it , for example using FTK imager or magnet software's such as a axiom or IEF. If it is possible how can I remove it quickly without it being recoverable?


   
Quote
AmNe5iA
(@amne5ia)
Estimable Member
Joined: 9 years ago
Posts: 175
 

The fact you are trying to delete a Kali VM makes it appear you are trying to cover up some wrong doing.
Not quick, but use a secure wipe program to overwrite the VM's files before deleting them.


   
ReplyQuote
JaredDM
(@jareddm)
Estimable Member
Joined: 9 years ago
Posts: 118
 

So I was wondering if removing a Kali Linux virtual machine workstation will be recoverable if the hard drive is removed and an image is grabbed off of it , for example using FTK imager or magnet software's such as a axiom or IEF. If it is possible how can I remove it quickly without it being recoverable?

Yes, we absolutely can and do recover data from deleted VMs. If you want to permanently destroy the data from a VM, you need to either wipe the VMDK file by overwriting the sectors it was stored in, or run an encrypted filesystem on the VM so when it's deleted the data is all scrambled.


   
ReplyQuote
MDCR
 MDCR
(@mdcr)
Reputable Member
Joined: 15 years ago
Posts: 376
 

The fact you are trying to delete a Kali VM makes it appear you are trying to cover up some wrong doing.

Either that or he/she works for one of the more "fun agencies" that is concerned with both hiding and finding evidence.


   
ReplyQuote
Share: