Performing Computer Forensics in the Cloud

In this podcast interview, the speaker will discuss the differences between doing forensics in the cloud and doing forensics on on-premises servers and hosts. In addition, the speaker will provide a key introduction to the overall tools and techniques utilized and lessons learned. 

Questions the moderator will ask the speaker: -What does it mean to perform computer forensics in the cloud?  How does this differ from performing computer forensics on computers and servers that are physically located within your environment? -What are the challenges of the data being volatile in a cloud environment?  How do you address these challenges? -How do you validate a Cloud based collection, to ensure it completed successfully and is forensically sound? -What are some commercially available tools that are useful when performing forensics in a cloud environment? -How do you perform cloud computer forensics so that the evidence has the best chance of overcoming challenges to it being admissible at trial?

Moderator: @Corey Reitz - Distinguished Cyber Assurance Architect, Sandia National Laboratories 

Speaker: @David Greetham - Principal, PC Forensics - Level Legal

Recorded on 10-17-2023