Analyzing Data Remnant Remains on User Devices to Determine Probative Artifacts in Cloud Environment
Cloud storage service allows users to store their data online, so that they can remotely access, maintain, manage, and back up data from anywhere via the Internet. Although helpful, this storage creates a challenge to digital forensic investigators and practitioners in collecting, identifying, acqui...
| Main Authors: | , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
Blackwell Publishing Inc.
2018
|
| Subjects: | |
| Online Access: | http://umpir.ump.edu.my/id/eprint/20097/ http://umpir.ump.edu.my/id/eprint/20097/2/Final%20Draft.pdf |
| _version_ | 1848821015552983040 |
|---|---|
| author | Ahmed, Abdulghani Ali Chua, Xue Li |
| author_facet | Ahmed, Abdulghani Ali Chua, Xue Li |
| author_sort | Ahmed, Abdulghani Ali |
| building | UMP Institutional Repository |
| collection | Online Access |
| description | Cloud storage service allows users to store their data online, so that they can remotely access, maintain, manage, and back up data from anywhere via the Internet. Although helpful, this storage creates a challenge to digital forensic investigators and practitioners in collecting, identifying, acquiring, and preserving
evidential data. This study proposes an investigation scheme for analyzing data remnants and determining probative artifacts in a cloud environment. Using pCloud as a case study, this research collected the data remnants available on end-user device storage following the storing, uploading, and accessing of data in the cloud storage. Data remnants are collected from several sources, including client software files, directory listing, prefetch, registry, network PCAP, browser, and memory and link files. Results demonstrate that the collected remnants data is beneficial in determining a sufficient number of artifacts about the investigated cyber crime. |
| first_indexed | 2025-11-15T02:18:38Z |
| format | Article |
| id | ump-20097 |
| institution | Universiti Malaysia Pahang |
| institution_category | Local University |
| language | English |
| last_indexed | 2025-11-15T02:18:38Z |
| publishDate | 2018 |
| publisher | Blackwell Publishing Inc. |
| recordtype | eprints |
| repository_type | Digital Repository |
| spelling | ump-200972018-06-07T01:42:57Z http://umpir.ump.edu.my/id/eprint/20097/ Analyzing Data Remnant Remains on User Devices to Determine Probative Artifacts in Cloud Environment Ahmed, Abdulghani Ali Chua, Xue Li QA76 Computer software Cloud storage service allows users to store their data online, so that they can remotely access, maintain, manage, and back up data from anywhere via the Internet. Although helpful, this storage creates a challenge to digital forensic investigators and practitioners in collecting, identifying, acquiring, and preserving evidential data. This study proposes an investigation scheme for analyzing data remnants and determining probative artifacts in a cloud environment. Using pCloud as a case study, this research collected the data remnants available on end-user device storage following the storing, uploading, and accessing of data in the cloud storage. Data remnants are collected from several sources, including client software files, directory listing, prefetch, registry, network PCAP, browser, and memory and link files. Results demonstrate that the collected remnants data is beneficial in determining a sufficient number of artifacts about the investigated cyber crime. Blackwell Publishing Inc. 2018-01 Article PeerReviewed application/pdf en http://umpir.ump.edu.my/id/eprint/20097/2/Final%20Draft.pdf Ahmed, Abdulghani Ali and Chua, Xue Li (2018) Analyzing Data Remnant Remains on User Devices to Determine Probative Artifacts in Cloud Environment. Journal of Forensic Sciences, 63 (1). pp. 112-121. ISSN 0022-1198. (Published) https://doi.org/10.1111/1556-4029.13506 10.1111/1556-4029.13506 |
| spellingShingle | QA76 Computer software Ahmed, Abdulghani Ali Chua, Xue Li Analyzing Data Remnant Remains on User Devices to Determine Probative Artifacts in Cloud Environment |
| title | Analyzing Data Remnant Remains on User Devices to Determine Probative Artifacts in Cloud Environment |
| title_full | Analyzing Data Remnant Remains on User Devices to Determine Probative Artifacts in Cloud Environment |
| title_fullStr | Analyzing Data Remnant Remains on User Devices to Determine Probative Artifacts in Cloud Environment |
| title_full_unstemmed | Analyzing Data Remnant Remains on User Devices to Determine Probative Artifacts in Cloud Environment |
| title_short | Analyzing Data Remnant Remains on User Devices to Determine Probative Artifacts in Cloud Environment |
| title_sort | analyzing data remnant remains on user devices to determine probative artifacts in cloud environment |
| topic | QA76 Computer software |
| url | http://umpir.ump.edu.my/id/eprint/20097/ http://umpir.ump.edu.my/id/eprint/20097/ http://umpir.ump.edu.my/id/eprint/20097/ http://umpir.ump.edu.my/id/eprint/20097/2/Final%20Draft.pdf |