Cloud Forensics

Definitions

1. Digital forensics applied to cloud-hosted systems, identities, logs, storage, and control-plane activity. Cloud forensics differs from traditional host-centric investigation because evidence often lives in APIs, service logs, and provider-managed layers.

   In plain English: Forensic investigation of incidents in cloud environments.

   Example: "The investigation relied on cloud forensics because the compromised workload was ephemeral and most evidence lived in audit logs."

Related Terms

• Anti-Forensics
• Incident Forensics
• Compromise Assessment
• Disk Forensics
• Forensic Investigation
• Incident Investigation
• Incident Timeline
• Live Forensics
• Memory Analysis