Forensicating Endpoint Artifacts in the World of Cloud Storage Services

Explore the critical forensic artifacts associated with cloud storage services like OneDrive, Google Drive, Box, and Dropbox in this informative conference talk. Gain insights into essential techniques for digital forensics and incident response (DFIR) professionals when investigating potential data exfiltration or insider threats. Learn how to perform forensically sound data acquisition to extract valuable metadata and evidence from cloud storage applications installed on endpoints. Discover the importance of local device artifacts in providing a comprehensive picture of cloud storage usage, even when files and metadata differ from the current cloud repository. Benefit from the expertise of Renzon Cruz, a seasoned security professional with experience in digital forensics, incident response, and cybersecurity training, as he shares practical knowledge on investigating cloud storage-related security incidents in today's remote work environment.

NSEC2021 - Renzon Cruz - Forensicating Endpoint Artifacts in the World of Cloud Storage Services