Incident Response : Analysing an old "ransomwared" VM

Hello everyone,

I recently got interested in Forensics and got the chance to play with Autopsy and Volatility in several CTFs, but I don't know exactly how can we get these logs from a Windows Server. I have an infected VM that I want to turn on to get the logs and do an investigation on that server to test my capabilities in a real world situation :

1. How to do turn on the VM in a secure way, …

computerforensics incident incident response old response vm