About Our Cloud Computing Forensics Practice

Law & Forensics is a recognized industry leader in forensic analysis for cloud computing. Our team of experts has 10+ years of experience and technical training on a wide range of cloud computing environments, technologies, and solutions. 

Utilizing proprietary patented cutting-edge forensics software, paired with off-the-shelf solutions, Law & Forensics can perform a wide range of forensic services involving cloud computing environments, including ESI collection and preservation, forensic investigations, deleted file recovery, and expert witness testimony. 

Our Services

100s of years of collective experience doing forensics. And of course working out of the box to solve problems…

Identify, preserve, and collect electronically stored information (ESI) stored in cloud computing environments.

Identification, preservation, and collection of electronically stored information (ESI) stored in cloud computing environments including:

  • E-mail (0365, Gmail, iMail),
  • Documents (SAP, Siebel, Google docs, Office 365, Siemens, Oracle),
  • Online applications and databases (SQL Server, Oracle, Azure, Google, Amazon),
  • VoIP communications (Voice over IP),
  • Messaging data (Facebook, Instagram, Twitter, Microsoft Teams, Slack),
  • Cloud storage (Dropbox, Google Drive, OneDrive, Box),
  • Logs and transaction records, security, and permission information.

Cloud Computing Forensic Investigations

  • Conduct forensic investigations of cloud environments, including the collection and analysis of virtual machines, logs, applications, and proprietary cloud applications and services.
  • Recover and extract ESI and data from a wide range of cloud services including Amazon Web Services (AWS), Amazon Athena, Amazon Aurora, Amazon Dynamo DB, Amazon Neptune, AWS Backup, Amazon S3 Glacier, Amazon EFS, Amazon QLDB, Google Cloud, Google Cloud SQL, Google Cloud Storage, Oracle Cloud, IBM Cloud, IBM Cloud Databases, IBM Db2 on Cloud, IBM Websphere, SAP Cloud Solutions.

Expert Reports and Affidavits

  • Author expert reports on technical topics related to digital evidence identified in the cloud.
  • Write expert reports on a wide range of forensic issues including: Analyzing the opposing party completeness of collection; Reviewing evidence of purported cloud ESI spoliation; Assessing client and opposing parties preservation and litigation hold actions with respect to cloud technologies.
  • Collaborate with lawyers to draft declarations, affidavits and reports relating to cloud computing forensic issues.

Deposition and Trial Testimony

  • Testify on unique issues specific to conducting cloud-based forensic forensics.
  • Serve as an expert witness on cloud computing systems and forensic analysis done on cloud technologies.
  • Testify in civil cases, arbitrations, and regulatory proceedings regarding computer forensic techniques, strategies, and protocols that were used to identify, collect, preserve, filter, process, review, analyze and produce electronically stored information and/or data from cloud systems.

Case Studies by Industry

Industry/Sector: Housing

Type of Case: Dispute involving residential mortgage services

Description: Retained by outside counsel to provide cloud forensic services in a 100 million dollar dispute involving residential mortgage servicers, investors and lenders in lawsuits brought by borrowers alleging claims related to wrongful foreclosure, fraud, and violations of state and federal statutes such as the Fair Credit Reporting Act (FCRA), Real Estate Settlement Procedures Act (RESPA), Home Affordable Modification Act (HAMP), and the Fair Debt Collections Practices Act (FDCPA); work included:

    • Collecting cloud mobile device backup images from various cloud providers,
    • Obtaining forensic images of virtual servers running in various cloud environments,
    • Collecting e-mail and OneDrive accounts from O365 in Microsoft Azure,
    • Processing collected ESI (including 40 million plus items and 63 million email messages),
    • Conducting searches of the repositories (developing search parameters and terms),
    • Delivering reports to outside counsel using a variety of review tools.
100’s of millions

Of documents collected

100’s of thousands

VoIP communications recovered


Of cloud forensic investigations

50.3k Mailboxes

examined by LnF


Of expert reports and affidavits


Years of relevant experience and expertise

 Forensic Cloud Computing Practice Edge


Proven capabilities of providing our clients results that exceeds expectations especially with disputes and investigations involving complex cloud-based technologies and systems. Cases types we have worked on include: Antitrust litigation, Medical device litigation, Multidistrict litigation, Securities class actions, Consumer class actions, Employee misconduct, Healthcare fraud, Merger and Acquisitions (M&A) litigation, Insurance fraud, Intellectual property theft, National security, Patent litigation, Copyright and trademark litigation RICO, Security law violations and SEC regulatory investigations, Shareholder rights litigation, White Collar Crime investigations, Workplace harassment, Cybersecurity, FinTech litigation, Foreign Corrupt Practices Act, FTC and FDA regulatory investigations, State Attorney General investigations, Regulatory investigations, NY DFS investigations, Privacy litigation, Breach responses, GDPR compliance, State privacy investigations, CCPA, Civil Rights/Section 1983 litigation, Pension/ERISA violations, Trade and Commerce disputes, Consumer Protection Litigation, Fair Labor Standard Act (FLSA) litigation, Real estate litigation, HUD and related FHA investigations.

Competitive fees

Our fees structure is competitive. We offer clients success based, hourly, or fixed fee arrangements, while ensuring that each engagement is spearheaded by a senior team member with significant knowledge and experience.


Our Forensic Consulting team of experts has 20+ years of experience and technical training on a wide range of forensic topics and issues. We have a wide range of experience and technical expertise with forensic technologies, and many of our team are both lawyers and technologists, with real world experience in litigating cases. Cloud environments that our team has worked on include Amazon Web Services (AWS), Amazon Athena, Amazon Aurora, Amazon Dynamo DB, Amazon Neptune, Amazon Redshift, AWS Direct Connect, AWS Backup, Amazon S3 Glacier, Amazon EFS, Amazon QLDB, Google Cloud, Google Cloud SQL, Google Cloud Storage, Oracle Cloud, IBM Cloud, IBM Cloud Databases, IBM Db2 on Cloud, IBM Decision Optimizer, IBM Watson Studio, IBM Watson Tone Analyzer, IBM Mobile Foundation, IBM WebSphere, SAP Cloud Solutions.

Quality Control

Delivering solutions that leverage a robust set of internal quality controls to ensure that our team is meeting the needs of our clients.