Cloud Computing Forensic Reference Architecture

New methodologies are needed to identify, acquire, preserve, examine, and interpret digital evidence in multi-tenant cloud environments with rapid provisioning, global elasticity, and broad network accessibility. These methodologies will provide capabilities for incident response, secure internal enterprise operations, and support for the criminal justice and civil litigation systems. This document presents the Cloud Computing Forensic Reference Architecture, which provides support for a cloud system’s forensic readiness.