Method and system for creation, analysis and navigation of virtual snapshots

1. A method for generation of virtual images on a computer system having a Virtual Machine (VM), comprising:

(a) generating a virtual image of the VM that includes a state of the VM's disk at a particular moment in time;

wherein the virtual image is viewable via a host-side graphical representation component for viewing a history of virtual images representing states of the VM's disk at prior moments in time;

(b) storing the virtual image as multiple chunks or partitions;

(c) from the host side, acquiring contents of the VM's memory using a guest-side Application Process Interface (API) and adding the contents of the VM's memory to the virtual image;

(d) configuring the graphical representation component to display only selected virtual images based on user selection, and

(e) in the graphical representation component, displaying a representation of differences between at least two of the virtual images.

2. The method of claim 1 , further comprising adding the virtual image to a virtual image tree, wherein the virtual image tree is viewable in the graphical representation component.

3. The method of claim 2 , wherein the virtual image tree is rendered to a user by the graphical representation component.

4. The method of claim 1 , further comprising selecting one virtual image as a base virtual image and a group of virtual images, wherein for each virtual image from the group differences between the virtual image and the base virtual image are indicated.

5. The method of claim 1 , wherein the graphical representation component is configurable to edit any of the following of the virtual image:

system constants; list of running processes;

VM processes conditions and priorities;

performance parameters;

list of OS device drivers installed/enabled-disabled/running;

file system data related to file system installed on the HDD or HDD partition; and a part of file system, including any of

(a) transaction log or Master File Table or directories,

(b) file system transaction log,

(c) NTFS master file table,

(d) Unix superblock and

(e) directories in NTFS, Third Extended file system (ext3), Hierarchical file system (HFS), Z file system (ZFS), Global file system (GFS), or Oracle cluster file system (OCFS).

6. The method of claim 1 , wherein the virtual image includes any of:

state of VM configuration file;

state of VM Compact Disk Read Only Memory (CD ROM);

state of VM network configuration;

a state of at least some of VM parameters associated with the HDD; and

state of VM sound configuration.

7. The method of claim 1 , further comprising restoring properties of the virtual image in a context of another VM.

8. The method of claim 1 , further comprising selecting another virtual image as a source of another VM context.

9. The method of claim 8 , further comprising restoring selected properties in a VM context running on the computing system.

10. The method of claim 1 , wherein the virtual image includes a state of a virtual CPU of the VM at a time of the virtual image generation or earlier.

11. The method of claim 1 , wherein the graphical representation component is configurable to edit any of the following in response to user commands:

(i) virtual image properties;

(ii) VM properties;

(iii) contents of files in a VM's file system; and

(iv) file metadata of files in a VM's file system.

12. The method of claim 1 , further comprising merging the virtual image and a virtual image of another VM.

13. The method of claim 1 , further comprising merging the virtual image and another virtual image of the VM.

14. A non-transitory computer useable medium having computer executable program logic stored thereon for executing on a processor for generation of virtual images on a computer, the computer executable program logic comprising:

(a) generating virtual images of a virtual machine (VM) that each includes a state of a corresponding VM's disk at particular moment in times;

wherein the virtual images are viewable via a host-side graphical representation component for viewing a history of virtual images representing states of the VM's disk at prior moments in time;

(b) storing the virtual images as a tree, with the virtual images corresponding to leaves of the tree;

(c) from the host side, acquiring contents of memory of the VMs using guest-side Application Process Interfaces (APIs) and adding the contents of the memory to the corresponding virtual images;

(d) configuring the graphical representation component to display only selected virtual images based on user selection, and

(e) in the graphical representation component, displaying a representation of differences between at least two of the virtual images from different VMs.

15. The medium of claim 14 , wherein at least one of the VMs is inactive.

16. The medium of claim 15 , further comprising code for scanning a storage drive of the computer to identify a virtual image of the inactive VM, and parsing the virtual image of the inactive VM to analyze its logical structure.