1. A method of system state analysis of a computational system comprising: specifying a scope of state information to be captured based on a selected type of analysis, wherein the scope of the state information includes at least one of kernel memory information, user memory information, and file related information, and wherein the scope of the state information is specified for one or more selected guest machines of a plurality of guest machines running on a virtual machine layer of a computational system; controlling the virtual machine layer to capture selective state information of a the one or more selected guest machines running on the virtual machine layer, wherein the selective state information is within the specified scope of the state information; and analyzing the selective state information according to the selected type of analysis. wherein the selected type of analysis includes a policy containing an attribute, and wherein the attribute is used to analyze a portion of the selective state information.