kvm-vmi
KVM-based Virtual Machine Instrospection.
Table of Contents
Overview
This project adds virtual machine introspection to the KVM hypervisor to monitor a running virtual machine without a guest agent.
This project is divided into 4 components:
kvm: linux kernel with vmi patches for KVMqemu: patched to allow introspectionnitro(legacy): userland library which receives events, introspects the virtual machine state, and fills the semantic gaplibvmi: virtual machine instrospection library with unified API acrossXenandKVM
At the moment, 2 versions of VMI patches are available for QEMU/KVM
in this repository:
1 - KVMI
A complete set of VMI APIs proposed by BitDefender
This is where the current effort is focused on today.
git clone https://github.com/KVM-VMI/kvm-vmi.git --recursive --branch kvmi
Corresponding submodule branches:
kvm:kvmiqemu:kvminitro:kvmilibvmi:kvmi
Note: the nitro is a legacy component and not part of kvmi.
2 - Nitro (legacy)
This version of KVM-VMI has been deprecated.
For details regarding how it works, see the Wiki page
Setup
Configuration and install instructions are detailed on the following Wiki page:
References
Based on Jonas Pfoh's work:
Maintainers
Contributing
PRs accepted.
Small note: If editing the Readme, please conform to the standard-readme specification.

Formed in 2009, the Archive Team (not to be confused with the archive.org Archive-It Team) is a rogue archivist collective dedicated to saving copies of rapidly dying or deleted websites for the sake of history and digital heritage. The group is 100% composed of volunteers and interested parties, and has expanded into a large amount of related projects for saving online and digital history.
