More Substance Than Vapor: When and Why to Include Evidence from the Cloud in Your Investigations

No ratings

Presented at TechnoSecurity&DigitalForensics 2019 by

Trey Amick

In a landscape of digital change, cloud storage has come to be a constant. Spanning mobile devices, computers, the Internet of Things (IoT), and more, cloud storage is an important data source—and sometimes, the only accessible source—for investigators in both public and private sectors. Even so, legal or procedural concerns, or simply a focus on device storage, prevent many investigators from obtaining this data. In this session, prepare to delve into the differences between cloud storage and device storage, including what’s available on each type of device. Find out why and how you may be missing important data, and get a sense for the scope of this missed potential. Finally, understand what’s possible from a procedural standpoint so that you can turn obstacles into opportunities.