Afternoon all,
I recently started my MSc project during my MSc in Computer Forensics.
I am approaching the topic of Cloud Forensics but with a heavy focus on AWS services.
What I have currently done so far is to research a majority of papers and articles relating to these areas and have used an old MSc project as the foundation for mine. The old project is Cloud Forensics on Windows 8 through the use of client apps. I am approaching in the same way but on Windows 10 and looking at a broader field of Cloud Service Providers as well as the main focus being AWS.
I am looking for any helpful suggestions in this area of what areas would be best to look into, areas of interest or what I might encounter as potential issues.
The general aim is to do an experiment using these CSP and their respective apps to see what (if any) data may be recoverable on a local machine. Also I am interested in being able to Forenscially Image (using FTK Imager) the virtual desktop whilst inside that environment with the idea to see if it behaves as a normal local machine would.
I would be greatful for any help in this area as Cloud has not been my main focus in past years however I do have a good foundation of knowledge along with research already conducted.
I welcome all comments and constructive critisim you may have to offer and would be really greatful if anyone would evaluate my Cloud Forensics Guide once I have finished the project.
Thanks,
I look forward to your responses.