41 research outputs found
Forensic Investigation of Cooperative Storage Cloud Service: Symform As a Case Study.
No full textResearchers envisioned Storage as a Service (StaaS) as an effective solution to the distributed management of digital data. Cooperative storage cloud forensic is relatively new and is an under-explored area of research. Using Symform as a case study, we seek to determine the data remnants from the use of cooperative cloud storage services. In particular, we consider both mobile devices and personal computers running various popular operating systems, namely Windows 8.1, Mac OS X Mavericks 10.9.5, Ubuntu 14.04.1 LTS, iOS 7.1.2, and Android KitKat 4.4.4. Potential artefacts recovered during the research include data relating to the installation and uninstallation of the cloud applications, log-in to and log-out from Symform account using the client application, file synchronization as well as their time stamp information. This research contributes to an in-depth understanding of the types of terrestrial artifacts that are likely to remain after the use of cooperative storage cloud on client devices
CloudMe forensics: A case of big data forensic investigation
No full textThe significant increase in the volume, variety and velocity of data complicates cloud forensic efforts, as such big data will, at some point, become computationally expensive to be fully extracted and analyzed in a timely manner. Thus, it is important for a digital forensic practitioner to have a well-rounded knowledge about the most relevant data artefacts that could be forensically recovered from the cloud product under investigation. In this paper, CloudMe, a popular cloud storage service, is studied. The types and locations of the artefacts relating to the installation and uninstallation of the client application, logging in and out, and file synchronization events from the computer desktop and mobile clients are described. Findings from this research will pave the way towards the development of tools and techniques (e.g. data mining techniques) for cloud-enabled big data endpoint forensics investigation
Forensic Investigation of P2P Cloud Storage: BitTorrent Sync as a Case Study
No full textCloud computing has been regarded as the technology enabler for the Internet of Things (IoT). To ensure the most effective collection of IoT-based evidence, it is vital for forensic practitioners to possess a contemporary understanding of the artefacts from different cloud services. In this paper, we seek to determine the data remnants from the use of BitTorrent Sync version 2.0. Findings from our research using mobile and computer devices running Windows 8.1, Mac OS X Mavericks 10.9.5, Ubuntu 14.04.1 LTS, iOS 7.1.2, and Android KitKat 4.4.4 suggested that artefacts relating to the installation, uninstallation, log-in, log-off, and file synchronisation could be recovered, which are potential sources of IoT forensics. We also present a forensically sound investigation methodology for BitTorrent Sync
Network information observed for the Facebook app.
No full textNetwork information observed for the Facebook app.</p
VM snapshots created for Skype experiments.
No full textVM snapshots created for Skype experiments.</p
The ‘users’ table of Messages.sqlite database.
No full textThe ‘users’ table of Messages.sqlite database.</p
Details of VM snapshots created for this research.
No full textDetails of VM snapshots created for this research.</p
Remnants of Facebook chat recovered from suspect’s RAM in JSON.
No full textRemnants of Facebook chat recovered from suspect’s RAM in JSON.</p
Login records located in the ‘analytics_logs’ table of Analytics.sqlite database.
No full textLogin records located in the ‘analytics_logs’ table of Analytics.sqlite database.</p
