Chapter 5

Google Drive

Forensic Analysis of Cloud Storage Data Remnants

The retrieval of digital evidence from cloud storage services (particularly from offshore providers) can be a challenge in a digital forensic investigation, due to virtualization, lack of knowledge on location of digital evidence, privacy issues, and legal or jurisdictional boundaries. Google Drive is a popular service, providing users a cost-effective, and in some cases free, ability to access, store, collaborate, and disseminate data. Using Google Drive as a case study, artifacts were identified that are likely to remain after the use of cloud storage, in the context of the experiments: on a computer hard drive and Apple iPhone3G, and the potential access point(s) for digital ...

Get Cloud Storage Forensics now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.