[vbox-dev] Virtual Machine Introspection for VirtualBox

[Federico Franzoni]

Hi Matej,
I'm currently working on VMI using the VirtualBox hypervisor.

As far as I know, there are no VMI projects using this software (but I 
focused my researches on Windows guests only).
Consequently, I had to patch the Vbox sources so to get what i needed 
(it is not hard when you know where to look for).

Anyway, if you want to talk about it, you can write me here or privately 
(to 'fed.franzoni AT gmail.com').
I would be glad to help and collaborate.

Best regards,
Federico

On 01/11/2015 14:17, Matej Zuzčák wrote:
> Hello all,
>
> Do you know about some option Virtual Machine Introspection (VMI) for
> monitoring system calls and internal system operations in Oracle
> VirtualBox machine (if I use Linux as quest system) in this time? I have
> read few research papers about VMI, but unfortunately these projects are
> dead today... I know about LibVMI project, but it does not have support
> for VirtualBox. I would use it for monitoring of high-interaction honeypot.
>
> Thanks for replies...
>