Episode 14: iBeg to DFIR – Cloud Forensics
In this episode, we are joined by Ronen Engler and Paul Lorentz to discuss cloud forensics and the increasing importance of understanding it.
What is Possible?
Today’s cellphone is considered the gateway to the cloud, cloud storage, social media, and so much more. When conducting data collection and examination, it is based on what is stored on the device. It is important to keep in mind that there is also always additional backend information stored not actually on the device.
What am I Allowed to Do?
When performing cloud forensics, it is important to consider jurisdiction and lawful access criteria. Find out what kind of authorization is required to get the data you need. Cloud data is constantly changing and is one of the most difficult types of data collection to deal with, meaning it is essential to ensure legal access to the data.
Today, we are going to talk about cloud forensics. As examiners, we sometimes look at it and sometimes forget about it but it is becoming more important to investigations.
Things to Keep in Mind with Cloud Forensics
- Cloud data updates regularly
- What the user syncs may change frequently
- Data may exist in many locations and devices
Listen to the full episode to learn more about cloud forensics and its importance to solving modern digital investigations.