Openstack forensic framework