Hello and welcome back.
In this lesson, I will show you how to create snapshots.
This is Oracle Virtual Box, as you can see.
In the previous earlier lesson, I have showed you how to install Linux, and if you click on Linux
a machine, you will see that over here there is a list of all the snapshots.
Snapshots, a recall of the current of previous state of the virtual machine, if I select an earlier
voting machine, for example, Windows seven, you will see that I have a list of snapshots.
If I wanted to revert back to an earlier state, I could easily select the snapshot that I want and
then click on the Star.
And then you ask me to confirm if I want to restore, if I wanted to restore, I would then check this
box and click on the button restore.
After that, he would then do all these other later states and go back to the state of the witch machine
as of this snapshot.
So this is very useful because sometimes when you are doing reverse engineering.
You might want to undo any changes that has been made to your operating system in the virtual machine.
Sometimes a tool or a program which you install might alter or make changes to your operating system.
For example, it might modify your registry settings or create other files in unknown locations.
So the easiest way to undo all those changes is simply to revert back to an earlier snapshot.
This is especially useful when you are trying to learn reverse engineering.
And want to undo changes made by the software, it is also useful in malware analysis when you are trying
to analyze a software which you suspect might be a virus or some Trojan.
So even ransomware.
So in order to undo the damage done by the virus, you can easily revert to an earlier snapshot.
So how do you create a snapshot?
We are going to try it on our colleague Linux Virtual Machine.
The first step is to select the virtual machine.
And then over here on the toolbar, you will see an icon button called Take.
If you hover your mouse over it, you will see.
The text take a snapshot, so all you need to do is just click on it, then he will ask you for a name,
for a snapshot.
So we can give it a name, we can give it a date, even if you prefer to call it by date.
So I can call it two to one much seven today's date, and I can put in some description if I wanted
to and if I didn't want, I can just leave it empty and then click, OK?
And now he has created the snapshot, I can then start my widget machine.
I will now log in using Carly as a login name and Carly as the password.
And it log-in.
I will now go into full screen mode by clicking and view and selecting full screen mode.
And then I will click on the switch button.
I will now demonstrate how to.
Create a file.
And then undo it by reverting to the earlier snapshot, so I will now right click here.
And then.
Create a folder right on the desktop and call it test and click create.
And now I have a new folder on the desktop.
Open the folder.
By double clicking in.
And inside this hall, the.
I will create a document and file.
Khalid testified that.
So now I'm going to undo this by reverting back to the earlier snapshot.
So to do that, I will now shut down this killing machine first, I will restore it to its window mode
by hovering my mouse at the bottom so that the toolbar will pop up and then selecting on the window
restor to go back to Windows mode.
And now I will shut down Cali by clicking this button on the top right corner.
And he shut down.
Now, my coffee machine has shut down, so as you can see, when I select on the machine, I can see
that the current state has changed.
So if I wanted to undo this change, all I need to do is select the previous state.
And then hit the rest button on the top.
You ask me to confirm.
So I uncheck this box and click on the restart button.
And now you will notice that the current state has updated to the two or two to my seven current state
so I can now restart my coffee machine and check it out.
My colleague machine has fully booted up, you will now notice that the folder which I created earlier
is gone.
So this is how you can use snapshots.
So use it often when you are reversing Saturday, so that is all for this video.
Thank you for watching.