Cloud systems have to deal with massive amounts of distributed, volatile data which
makes forensic investigations difficult. Using the NIST reference architecture, a system is
devised to proactively capture forensic data that can be used in an investigation. The system
proposes using nested virtual machines with forensic capabilities.
A selection of conference proceedings: Student Symposium in Science, 29–30 October 2015, University of the Free State, South