Cloud Forensics brings unique concerns regarding acquisition, preservation, and analysis of potential digital evidence. Examiners will find less allocated evidence left behind on a system when a subject is using the cloud. Information stored in the cloud, can be stored anywhere in the world, and based on its location or country, privacy laws could be an issue. Establishing a chain of custody is difficult or almost impossible and its integrity and authenticity cannot be fully determined. Criminals are using free and paid, convenient storage options, like Google Drive and Dropbox, to store illegal photos, files, and to launch malware attacks. Additionally, these cloud sites can be used to share malware infected files that can compromise systems. The installed malware is used to siphon data from computers out and onto Google, Dropbox, OneDrive, etc.
In this webinar, attendees will learn what to expect when examining a local computer that has been used to store information in the cloud. Learn the best ways to access artifacts that may relate to cloud usage and can be key evidence to your investigation.