Investigation procedures for virtual machines

A system comprising:

• at least one processor;
• memory coupled with the at least one processor;
• and
• instructions stored in the memory and executable by the at least one processor to cause the system to:
• receive an indication of a virtual machine, hosted in a first environment, for instantiation within an isolated recovery environment different from the first environment, the virtual machine corresponding to a snapshot, the snapshot stored in a second environment different from the first environment and the isolated recovery environment;
• and
• create a target resource in the isolated recovery environment, the target resource configured for instantiation of a respective version of the virtual machine using the snapshot, the snapshot corresponding to the respective version of the virtual machine,
• wherein communication of data corresponding to the respective version of the virtual machine is enabled between the isolated recovery environment and a computing system external to the isolated recovery environment based at least in part on the respective version of the virtual machine being instantiated within the isolated recovery environment using the target resource and the snapshot.

A non-transitory computer-readable medium storing code, the code comprising instructions executable by at least one processor to:

• receive an indication of a virtual machine, hosted in a first environment, for instantiation within an isolated recovery environment different from the first environment, the virtual machine corresponding to a snapshot, the snapshot stored in a second environment different from the first environment and the isolated recovery environment;
• and
• create a target resource in the isolated recovery environment, the target resource configured for instantiation of a respective version of the virtual machine using the snapshot, the snapshot corresponding to the respective version of the virtual machine,
• wherein communication of data corresponding to the respective version of the virtual machine is enabled between the isolated recovery environment and a computing system external to the isolated recovery environment based at least in part on the respective version of the virtual machine being instantiated within the isolated recovery environment using the target resource and the snapshot.