Retrieving and identifying remnants of artefacts on local devices using Sync.com cloud
Most current research in cloud forensics is focused on tackling the challenges encountered by forensic investigators in identifying and recovering artifacts from cloud devices. These challenges arise from the diverse array of cloud service providers as each has its distinct rules, guidelines, and re...
| Main Authors: | , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
Multidisciplinary Digital Publishing Institute
2024
|
| Online Access: | http://psasir.upm.edu.my/id/eprint/118187/ http://psasir.upm.edu.my/id/eprint/118187/1/118187.pdf |
| _version_ | 1848867453931618304 |
|---|---|
| author | Ahmed, Abdulghani Ali Farhan, Khalid Ninggal, Mohd Izuan Hafez Alselwi, Ghadir |
| author_facet | Ahmed, Abdulghani Ali Farhan, Khalid Ninggal, Mohd Izuan Hafez Alselwi, Ghadir |
| author_sort | Ahmed, Abdulghani Ali |
| building | UPM Institutional Repository |
| collection | Online Access |
| description | Most current research in cloud forensics is focused on tackling the challenges encountered by forensic investigators in identifying and recovering artifacts from cloud devices. These challenges arise from the diverse array of cloud service providers as each has its distinct rules, guidelines, and requirements. This research proposes an investigation technique for identifying and locating data remnants in two main stages: artefact collection and evidence identification. In the artefacts collection stage, the proposed technique determines the location of the artefacts in cloud storage and collects them for further investigation in the next stage. In the evidence identification stage, the collected artefacts are investigated to identify the evidence relevant to the cybercrime currently being investigated. These two stages perform an integrated process for mitigating the difficulty of locating the artefacts and reducing the time of identifying the relevant evidence. The proposed technique is implemented and tested by applying a forensics investigation algorithm on Sync.com cloud storage using the Microsoft Windows 10 operating system. © 2024 by the authors. |
| first_indexed | 2025-11-15T14:36:45Z |
| format | Article |
| id | upm-118187 |
| institution | Universiti Putra Malaysia |
| institution_category | Local University |
| language | English |
| last_indexed | 2025-11-15T14:36:45Z |
| publishDate | 2024 |
| publisher | Multidisciplinary Digital Publishing Institute |
| recordtype | eprints |
| repository_type | Digital Repository |
| spelling | upm-1181872025-06-26T08:30:06Z http://psasir.upm.edu.my/id/eprint/118187/ Retrieving and identifying remnants of artefacts on local devices using Sync.com cloud Ahmed, Abdulghani Ali Farhan, Khalid Ninggal, Mohd Izuan Hafez Alselwi, Ghadir Most current research in cloud forensics is focused on tackling the challenges encountered by forensic investigators in identifying and recovering artifacts from cloud devices. These challenges arise from the diverse array of cloud service providers as each has its distinct rules, guidelines, and requirements. This research proposes an investigation technique for identifying and locating data remnants in two main stages: artefact collection and evidence identification. In the artefacts collection stage, the proposed technique determines the location of the artefacts in cloud storage and collects them for further investigation in the next stage. In the evidence identification stage, the collected artefacts are investigated to identify the evidence relevant to the cybercrime currently being investigated. These two stages perform an integrated process for mitigating the difficulty of locating the artefacts and reducing the time of identifying the relevant evidence. The proposed technique is implemented and tested by applying a forensics investigation algorithm on Sync.com cloud storage using the Microsoft Windows 10 operating system. © 2024 by the authors. Multidisciplinary Digital Publishing Institute 2024-12 Article PeerReviewed text en cc_by_4 http://psasir.upm.edu.my/id/eprint/118187/1/118187.pdf Ahmed, Abdulghani Ali and Farhan, Khalid and Ninggal, Mohd Izuan Hafez and Alselwi, Ghadir (2024) Retrieving and identifying remnants of artefacts on local devices using Sync.com cloud. Sensors, 25 (1). art. no. 106. pp. 1-27. ISSN 1424-8220 https://www.mdpi.com/1424-8220/25/1/106 10.3390/s25010106 |
| spellingShingle | Ahmed, Abdulghani Ali Farhan, Khalid Ninggal, Mohd Izuan Hafez Alselwi, Ghadir Retrieving and identifying remnants of artefacts on local devices using Sync.com cloud |
| title | Retrieving and identifying remnants of artefacts on local devices using Sync.com cloud |
| title_full | Retrieving and identifying remnants of artefacts on local devices using Sync.com cloud |
| title_fullStr | Retrieving and identifying remnants of artefacts on local devices using Sync.com cloud |
| title_full_unstemmed | Retrieving and identifying remnants of artefacts on local devices using Sync.com cloud |
| title_short | Retrieving and identifying remnants of artefacts on local devices using Sync.com cloud |
| title_sort | retrieving and identifying remnants of artefacts on local devices using sync.com cloud |
| url | http://psasir.upm.edu.my/id/eprint/118187/ http://psasir.upm.edu.my/id/eprint/118187/ http://psasir.upm.edu.my/id/eprint/118187/ http://psasir.upm.edu.my/id/eprint/118187/1/118187.pdf |