Investigation Methodology of a Virtual Desktop Infrastructure for IoT

Figure 5

Image of pagefile.sys hex values while mounting a virtual disk using Encase (top) and FTK Imager (bottom).