ConceptsCloud Forensics

Cloud Forensics

The discipline of investigating incidents in cloud environments, collecting and analyzing evidence like snapshots, memory, and logs to reconstruct what happened, while working within the constraints and capabilities the cloud provider exposes.

Glossary definition

18 direct links2 lessons

Concept Neighborhood

Prerequisite · arrow shows the orderRelated · bigger circles cover more lessons

Start here

Cloud Forensic Collection

The foundation Cloud Forensics builds on, worth understanding first.

Open concept →

Prerequisitelearn this first

Cloud Forensic CollectionStart here

Gathering evidence from a cloud environment during an incident in a sound, repeatable way, such as snapshotting disks, capturing memory, and exporting logs, while preserving integrity and chain of custody.

lessons

Relatedsorted by lesson coverage

CI/CD Compromise Response

lessons

Cloud Chain of Custody

lessons

Cloud IR Metrics

lessons

Cloud IR Preparation

lessons

Forensics

lessons

Business Associate Agreement (BAA)

lessons

Show 11 more connections

Audit Log Analysis

lesson

Cardholder Data Environment (CDE)

lesson

CI/CD Identity Security

lesson

Cloud Containment

lesson

Cloud Detection

lesson

Cloud Incident Response

lesson

Cloud IR

lesson

Cloud Security Architect (Distinction)

lesson

Cloud SIEM

lesson

Ephemeral Evidence

lesson

Forensic Considerations

lesson

Related Lessons

2 lessons cover this concept

Detect and Respond in Cloud Environments

General Beginner

Cloud Detection and Response

Cloud Security Engineer