Does anyone else use the VDDK API's with their forensic examinations?
http://crucialsecurityblog.harris.com/2012/01/18/how-can-vmwares-virtual-disk-development-kit-help-the-forensic-examiner/