Digital droplets: Microsoft SkyDrive forensic data remnants
Cloud storage services such as the popular MicrosoftSkyDriveprovide both organisational and individual users a cost-effective, and in some cases free, way of accessing, storing and disseminating data. The identification of digital evidence relating to cloud storage services can, however, be a challenge in a digital forensic investigation. Using SkyDrive as a case study, we identified the types of terrestrial artefacts that are likely to remain on a clients machine (in the context of our experiments; computer hard drive and iPhone), and where the access point(s) for digital forensics examiners are, that will allow them to undertake steps to secure evidence in a timely fashion.
cloud storage cloud forensics digital forensic framework microsoft skydrive analysis