1. A computer-implemented method for receiving auditing information, the method comprising: receiving an indication to start collecting auditing information from one or more protected virtual machines from outside of the protected virtual machines; identifying an auditing information source, wherein the source indicates a protected virtual machine; receiving auditing information from the identified source; and storing the received auditing information in a location outside of the protected virtual machine along with identifying information of the source, wherein the preceding steps are performed by at least one processor.