I intend to train an RNN on snapshots of the VM metrics to classify malware. I will, therefore, run hundreds of different pieces of malware inside that VM. It has been isolated from my host (as best as I could/thought).
What would be the best (most secure for the host and most reliable for the information collected) way to gather regular (every second or so) snapshots of the system metrics (such as packets sent and received and process list) from an isolated Windows 10 VM where malware will be running?
The way to collect data should make it difficult for malware to interfere with it and not increase the risk of malware escaping the VM. Until now, I was relying on VBoxManage (which is great) but processes and packets sent/received are not listed.
I am open to other virtualization engines than VirtualBox, if it helps.