In the new era of digital forensics,various technologies and applications for data organization,storage,processing,and transmission,such as VMware vSphere ESXI virtualization technology,have been widely implemented on the internet.This"virtualization technology"poses unprecedented challenges to the traditional model of digital evidence collection,which primarily focused on individual machines.One of the persistent challenges for forensic experts is the rapid acquisition of necessary digital evidence in a decentralized storage environment.Based on relevant domestic and international research,this paper provides a comprehensive discussion on the characteristics of virtualization and forensic strategies in virtualized environments.