There is rather large ecosystem of tooling for poking and peeking the insides of VMs, usually called "VMI" (virtual machine introspection). kvm-vmi is one such

There is rather large ecosystem of tooling for poking and peeking the insides of VMs, usually called "VMI" (virtual machine introspection). kvm-vmi is one such example, but there are many others https://github.com/KVM-VMI/kvm-vmi https://github.com/KVM-VMI/kvm-vmi