Cloud Computing Forensics

Cloud Computing Forensics

About Our Cloud Computing Forensics Practice

Law & Forensics is a recognized industry leader in forensic analysis for cloud computing. Our team of experts has 10+ years of experience and technical training on a wide range of cloud computing environments, technologies, and solutions.

Our team utilizes proprietary and patented cutting-edge forensics software, paired with off-the-shelf solutions, Law & Forensics can perform a wide range of forensic services involving cloud computing environments, including ESI collection and preservation, forensic investigations, deleted file recovery, and expert witness testimony.

Our Services

100s of years of collective experience doing forensics. And of course working out of the box to solve problems…

Preservation of Data from Cloud Cloud Forensics Expert Reports and Affidavits Deposition and Trial Testimony

Identify, preserve, and collect electronically stored information (ESI) stored in cloud computing environments.

Identification, preservation, and collection of electronically stored information (ESI) stored in cloud computing environments including:

E-mail (0365, Gmail, iMail),
Documents (SAP, Siebel, Google docs, Office 365, Siemens, Oracle),
Online applications and databases (SQL Server, Oracle, Azure, Google, Amazon),
VoIP communications (Voice over IP),
Messaging data (Facebook, Instagram, Twitter, Microsoft Teams, Slack),
Cloud storage (Dropbox, Google Drive, OneDrive, Box),
Logs and transaction records, security, and permission information.

Server Forensics - Virtual and physical server investigations

Server Forensics - server threat analysis_

Cloud Computing Forensic Investigations

Conduct forensic investigations of cloud environments, including the collection and analysis of virtual machines, logs, applications, and proprietary cloud applications and services.
Recover and extract ESI and data from a wide range of cloud services including Amazon Web Services (AWS), Amazon Athena, Amazon Aurora, Amazon Dynamo DB, Amazon Neptune, AWS Backup, Amazon S3 Glacier, Amazon EFS, Amazon QLDB, Google Cloud, Google Cloud SQL, Google Cloud Storage, Oracle Cloud, IBM Cloud, IBM Cloud Databases, IBM Db2 on Cloud, IBM Websphere, SAP Cloud Solutions.

Expert Reports and Affidavits

Author expert reports on technical topics related to digital evidence identified in the cloud.
Write expert reports on a wide range of forensic issues including: Analyzing the opposing party completeness of collection; Reviewing evidence of purported cloud ESI spoliation; Assessing client and opposing parties preservation and litigation hold actions with respect to cloud technologies.
Collaborate with lawyers to draft declarations, affidavits and reports relating to cloud computing forensic issues.

Deposition and Trial Testimony

Testify on unique issues specific to conducting cloud-based forensic forensics.
Serve as an expert witness on cloud computing systems and forensic analysis done on cloud technologies.
Testify in civil cases, arbitrations, and regulatory proceedings regarding computer forensic techniques, strategies, and protocols that were used to identify, collect, preserve, filter, process, review, analyze and produce electronically stored information and/or data from cloud systems.

Case Studies by Industry

Global Residential Mortgage Service Company

Industry/Sector: Housing

Type of Case: Dispute involving Residential Mortgage Services

Description: Retained by outside counsel to provide cloud forensic services in a $100 million dispute involving residential mortgage servicers, investors, and lenders in lawsuits brought by borrowers alleging claims related to wrongful foreclosure, fraud, and violations of state and federal statutes such as the Fair Credit Reporting Act (FCRA), Real Estate Settlement Procedures Act (RESPA), Home Affordable Modification Act (HAMP), and the Fair Debt Collections Practices Act (FDCPA). Efforts included:

- Collected cloud mobile device backup images from various cloud providers.
- Obtained forensic images of virtual servers running in various cloud environments.
- Collected e-mail and OneDrive accounts from O365 in Microsoft Azure.
- Processed collected ESI (including 40+ million items and 63 million email messages).
- Conducted searches of the repositories (developing search parameters and terms).
- Delivered reports to outside counsel using a variety of review tools.

Entertainment Company

Industry/Sector: Entertainment

Type of Case: Patent Litigation

Description: Hired to serve as an expert witness in patent disputes involving cloud computing technologies by a Fortune 500 entertainment company. Efforts included:

- Reviewed patent claims and underlying reference materials.
- Drafted and submitted an expert report and findings specific to allegations of patent infringement.
- Advised counsel on deposing opposing counsel expert witnesses.

Global eCommerce Organization

Industry/Sector: eCommerce

Type of Case: Misappropriation Litigation

Description: Retained by in-house counsel to conduct a digital forensic investigation on company machines to determine if information had been misappropriated in connection with a dispute with a competitor and vendor operating in the eCommerce sector. Efforts included:

- Identified large amounts of copying by departing employees that led to the court granting a TRO against the defendants from the managed cloud computing service provider.
- Wrote a protocol to conduct a neutral forensic analysis of the defendant’s computers, which the court then adopted.
- Selected by the parties and appointed by the court to perform the forensic investigation of the defendant’s computers, servers, mobile devices, and cloud systems that uncovered evidence of widespread misappropriation, which ultimately resulted in a settlement.

100’s of Millions

of documents collected

100’s of Thousands

VoIP communications recovered

100’s of Cloud Forensic

investigations

50.3k Mailboxes

examined by L&F

100’s of Expert Reports

and affidavits written

65+ Years of

experience and expertise

Forensic Cloud Computing Practice Edge

Cyber Insurance for Law Firms: Understanding the Cyber Risk Policy and Key Considerations for Law Firm Policy Holders

Capabilities

Proven capabilities of providing our clients results that exceeds expectations especially with disputes and investigations involving complex cloud-based technologies and systems. Cases types we have worked on include: Antitrust litigation, Medical device litigation, Multidistrict litigation, Securities class actions, Consumer class actions, Employee misconduct, Healthcare fraud, Merger and Acquisitions (M&A) litigation, Insurance fraud, Intellectual property theft, National security, Patent litigation, Copyright and trademark litigation RICO, Security law violations and SEC regulatory investigations, Shareholder rights litigation, White Collar Crime investigations, Workplace harassment, Cybersecurity, FinTech litigation, Foreign Corrupt Practices Act, FTC and FDA regulatory investigations, State Attorney General investigations, Regulatory investigations, NY DFS investigations, Privacy litigation, Breach responses, GDPR compliance, State privacy investigations, CCPA, Civil Rights/Section 1983 litigation, Pension/ERISA violations, Trade and Commerce disputes, Consumer Protection Litigation, Fair Labor Standard Act (FLSA) litigation, Real estate litigation, HUD and related FHA investigations.

Annual Review of Regulations of Bitcoin and Blockchain in the United States and Abroad

Competitive fees

Our fees structure is competitive. We offer clients success based, hourly, or fixed fee arrangements, while ensuring that each engagement is spearheaded by a senior team member with significant knowledge and experience.

Expertise

Our Forensic Consulting team of experts has 20+ years of experience and technical training on a wide range of forensic topics and issues. We have a wide range of experience and technical expertise with forensic technologies, and many of our team are both lawyers and technologists, with real world experience in litigating cases. Cloud environments that our team has worked on include Amazon Web Services (AWS), Amazon Athena, Amazon Aurora, Amazon Dynamo DB, Amazon Neptune, Amazon Redshift, AWS Direct Connect, AWS Backup, Amazon S3 Glacier, Amazon EFS, Amazon QLDB, Google Cloud, Google Cloud SQL, Google Cloud Storage, Oracle Cloud, IBM Cloud, IBM Cloud Databases, IBM Db2 on Cloud, IBM Decision Optimizer, IBM Watson Studio, IBM Watson Tone Analyzer, IBM Mobile Foundation, IBM WebSphere, SAP Cloud Solutions.

Review of Alternative Dispute Resolution Case Law in 2018

Quality Control

Delivering solutions that leverage a robust set of internal quality controls to ensure that our team is meeting the needs of our clients.