The embodiment of the invention provides a
virtual machine introspection method and device,
electronic equipment and a storage medium, and belongs to the technical field of computers.The method comprises the steps that an agent
system is loaded to a trusted domain, the agent
system comprises a trusted agent component and a
loader, the trusted domain further comprises an
operating system kernel of a
virtual machine, the
virtual machine runs in the trusted domain, and the trusted agent component is loaded in the trusted domain; the virtual
machine is in a secure arbitration mode, the operation environment of the agent
system is initialized through a
loader and a virtual
machine monitor, the virtual
machine monitor is in a non-secure arbitration mode, the
operation mode of the agent system is determined, the
operation mode is an exclusive mode or a cooperative mode, and the agent system is operated based on the exclusive mode or the cooperative mode. A
virtual processor and memory resources of a trusted domain are managed through a virtual machine monitor, so that an agent system can run independently of an
operating system kernel, and a safe trusted execution channel can be provided for a trusted domain owner.