About Our Cloud Computing Forensics Practice

Our Cloud Computing forensics practice is world renowned with 20+ years of experience with Amazon Web Service (AWS), Microsoft Azure, IBM Cloud, and Oracle Cloud to name a few. The Cloud Computer forensics practice has a proven track record performing complex forensic investigations involving cloud systems and technologies. Our Cloud Computing forensics team uses proprietary and patented cutting-edge forensics software and off-the-shelf solutions to conduct forensic investigations involving or focusing on cloud systems and technologies.

Our Cloud Computing forensics practice performs a wide range of forensic services involving cloud computing environments, including ESI collection and preservation, forensic investigations, deleted file recovery, and expert witness testimony in civil and criminal trials. Law & Forensics’ is renowned for our forensic, cybersecurity, and eDiscovery services including the following: social media forensics, cloud forensics, mobile device forensics, cybersecurity assessments, incident response, crypto currency recovery, digital banking, Apple and PC forensics, and cybersecurity tabletops. Our Cloud Computing forensics team has more than 40+ collective years of experience and members of the team are associated with the Journal of Law & Cyberwarfare, Legal Cyber Academy, and Harvard University.

Our Services

100s of years of collective experience doing forensics. And of course working out of the box to solve problems…

Identify, preserve, and collect electronically stored information (ESI) stored in cloud computing environments.

Identification, preservation, and collection of electronically stored information (ESI) stored in cloud computing environments including:

  • E-mail (0365, Gmail, iMail),
  • Documents (SAP, Siebel, Google docs, Office 365, Siemens, Oracle),
  • Online applications and databases (SQL Server, Oracle, Azure, Google, Amazon),
  • VoIP communications (Voice over IP),
  • Messaging data (Facebook, Instagram, Twitter, Microsoft Teams, Slack),
  • Cloud storage (Dropbox, Google Drive, OneDrive, Box),
  • Logs and transaction records, security, and permission information.
Cloud Computing Forensics
Cloud Computing Forensics

Cloud Computing Forensic Investigations

  • Conduct forensic investigations of cloud environments, including the collection and analysis of virtual machines, logs, applications, and proprietary cloud applications and services.
  • Recover and extract ESI and data from a wide range of cloud services including Amazon Web Services (AWS), Amazon Athena, Amazon Aurora, Amazon Dynamo DB, Amazon Neptune, AWS Backup, Amazon S3 Glacier, Amazon EFS, Amazon QLDB, Google Cloud, Google Cloud SQL, Google Cloud Storage, Oracle Cloud, IBM Cloud, IBM Cloud Databases, IBM Db2 on Cloud, IBM Websphere, SAP Cloud Solutions.

Expert Reports and Affidavits

  • Author expert reports on technical topics related to digital evidence identified in the cloud.
  • Write expert reports on a wide range of forensic issues including: Analyzing the opposing party completeness of collection; Reviewing evidence of purported cloud ESI spoliation; Assessing client and opposing parties preservation and litigation hold actions with respect to cloud technologies.
  • Collaborate with lawyers to draft declarations, affidavits and reports relating to cloud computing forensic issues.
Cloud Computing Forensics
Cloud Computing Forensics

Deposition and Trial Testimony

  • Testify on unique issues specific to conducting cloud-based forensic forensics.
  • Serve as an expert witness on cloud computing systems and forensic analysis done on cloud technologies.
  • Testify in civil cases, arbitrations, and regulatory proceedings regarding computer forensic techniques, strategies, and protocols that were used to identify, collect, preserve, filter, process, review, analyze and produce electronically stored information and/or data from cloud systems.

Case Studies by Industry

Industry/Sector: Housing

Type of Case: Dispute involving Residential Mortgage Services

Description: Retained by outside counsel to provide cloud forensic services in a $100 million dispute involving residential mortgage servicers, investors, and lenders in lawsuits brought by borrowers alleging claims related to wrongful foreclosure, fraud, and violations of state and federal statutes such as the Fair Credit Reporting Act (FCRA), Real Estate Settlement Procedures Act (RESPA), Home Affordable Modification Act (HAMP), and the Fair Debt Collections Practices Act (FDCPA). Efforts included:

    • Collected cloud mobile device backup images from various cloud providers.
    • Obtained forensic images of virtual servers running in various cloud environments.
    • Collected e-mail and OneDrive accounts from O365 in Microsoft Azure.
    • Processed collected ESI (including 40+ million items and 63 million email messages).
    • Conducted searches of the repositories (developing search parameters and terms).
    • Delivered reports to outside counsel using a variety of review tools.
100’s of Millions

of documents collected

100’s of Thousands

VoIP communications recovered

100’s of Cloud Forensic


50.3k Mailboxes

examined by L&F

100’s of Expert Reports

and affidavits written

65+ Years of

experience and expertise

 Forensic Cloud Computing Practice Edge

Cyber Insurance for Law Firms: Understanding the Cyber Risk Policy and Key Considerations for Law Firm Policy Holders


Annual Review of Regulations of Bitcoin and Blockchain in the United States and Abroad

Competitive fees


Review of Alternative Dispute Resolution Case Law in 2018

Quality Control