Methodology for Obtaining Evidence in the Cloud

Abstract

Cloud computing is the trend in the digital transformation process most embraced by organizations of all sizes. The use of the information storage service in the cloud begins to take a large share in the discipline of computer forensics. The use of the cloud has allowed forensic computer scientists to remotely acquire and preserve digital evidence stored on any computer device, such as a mobile device. This has led not only to improve and optimize the justice service in terms of investigations where digital evidence is involved, but also to a paradigm shift for computer forensics in the not too distant future, where the evidence digital will no longer be stored in the device for daily use and will be stored in different servers located anywhere in the world. This article addresses the methodological aspect and good practices related to obtaining digital evidence stored in the cloud.