Process and analysis
What is Snapshot?
A saved state of a virtual machine you can return to in seconds. The property that makes a research machine safe to dirty.
A snapshot is a saved state of a virtual machine that can be restored in seconds. Everything on the machine, including memory if chosen, goes back to how it was at that moment.
Snapshots make research machines safe to dirty. An analyst can open a malicious file, browse a criminal forum or install untrusted tools, then roll back to a clean state before the next task.