Finding Evidence of Cloud Data ‘Footprints’ in Existing Evidence

Cloud data has quickly become the new frontier in DFIR. More and more data is being stored in the Cloud, by the various cloud storage, cloud communication, social networking, and mobile computing platforms. Join Tim Moniot from Magnet Forensics during this discussion and demonstration of how you can begin identifying evidence of cloud platform usage, as a component related to your investigations. Once identifying that Cloud data is related to an investigation, Tim will discuss options for gaining access to and subsequently collecting relevant Cloud source data so that it too can be analyzed within AXIOM. This presentation will be relevant to both law enforcement and corporate DFIR professionals.