Cloud Log Forensics Metadata Analysis

Download Now
Provided by: University of Tasmania
Topic: Cloud
Format: PDF
The increase in the quantity and questionable quality of the forensic information retrieved from the current virtualized data cloud system architectures has made it extremely difficult for law enforcement to resolve criminal activities within these logical domains. This paper poses the question of what kind of information is desired from Virtual Machine (VM) hosted Operating Systems (OS) investigated by a cloud forensic examiner. The authors give an overview of the information that exists on current VM OS by looking at its kernel hypervisor logs and discusses the shortcomings. An examination of the role that the VM kernel hypervisor logs provide as OS metadata in cloud investigations is also presented.
Download Now

Find By Topic