Recovering Digital Evidence in a Cloud Computing Paradigm

More documents

Recommendations

Info

HOW • Dropbox – Desktop Application – Older version easy to parse, Python scripts available from ATC-NY or via IEF v5.5. – Newer version encrypted – noth<strong>in</strong>g available to decrypt the files…yet. – Need to rely on artifacts left beh<strong>in</strong>d from desktop application or web access if newer version was used
WHERE • Dropbox – Web Based Access – Temporary Internet Files – RAM dumps – pagefile.sys/hiberfil.sys
Page 1 and 2: Recovering Digital Evidence in a Cl
Page 3 and 4: Overview • The Cloud Computing Tr
Page 5 and 6: Trends in Digital Forensics Cloud C
Page 7 and 8: What You Can Do • Focus more on d
Page 9 and 10: Where To Find The Evidence • Page
Page 11 and 12: Where To Find The Evidence • Unal
Page 13 and 14: • Dropbox WHAT - Cloud based file
Page 15 and 16: HOW • Dropbox - Desktop Applicati
Page 17: HOW • Dropbox - Desktop Applicati
Page 21 and 22: HOW • Dropbox - Web Based Access
Page 29 and 30: • Flickr WHAT - Image and video h
Page 31 and 32: • Flickr WHERE
Page 33 and 34: • Flickr HOW {"id":"7231020308","
Page 35 and 36: WHAT • Google Docs - Web-based of
Page 37 and 38: WHERE • Google Docs
Page 39 and 40: WHO • Google Drive
Page 41 and 42: WHERE • Google Drive - Desktop Ap
Page 43 and 44: HOW • Google Drive- Desktop Appli
Page 45 and 46: HOW • Google Drive - Web Based Ac
Page 47 and 48: • SkyDrive WHAT - File hosting se
Page 49 and 50: WHERE • SkyDrive - Web Based Acce
Page 51 and 52: HOW • SkyDrive - Web Based Access
Page 53 and 54: WHERE • SkyDrive - Desktop Applic
Page 61 and 62: Conclusion • A great deal of Clou

Recovering Digital Evidence in a Cloud Computing Paradigm

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?