The use of the Cloud has become a common tool used to store data. Cloud storage allows users to add storage capacity, and sync information and data across devices, and remote computing services [1]. With cloud computing, data can be streamed from cloud storage rather than directly from a device.
Devices can also synchronize or back up data through the Cloud service. Cloud computing allows for on-demand self-service, universal network access, location-independent resource pooling, rapid elasticity, and pay-per-use [2].
According to the Scientific Working Group on Digital Evidence when data on a local device is encrypted or difficult to decode data can be requested from the cloud provider in an unencrypted or readable form.
They also state that data that has been backed up over time would be useful evidence because it would not be overwritten [1]. Although there are features of the Cloud that are beneficial to forensics investigators there are also several challenges that come along with them…
The complexity of the Cloud and its infrastructure can be daunting and difficult to understand. Investigators need to familiarize themselves with the Cloud’s inner workings so they may provide proper expert witness testimony.
Cloud forensics can be both beneficial and challenging. As the capabilities and knowledge of cloud computing grow, investigators must adapt their procedures and data collection to cloud forensics. Computer forensics continues to change as new technology and devices are introduced. Mastering the issues and challenges in cloud forensics will further solidify the usefulness of digital evidence in forensic investigations.