Cloud Signature: A Tool for Cloud Forensics

This project will create Cloud Signature, a tool for law enforcement investigators to quickly obtain the specifics of what to request in a preservation letter and/or warrant to a cloud application service provider. It will scan a seized device (e.g. computer, phone, iPad, etc.) to identify the cloud applications that have been used and gather remnants that the applications leave behind.

The tool will be easy to update as the developers and the community identify new cloud applications. Cloud Signature will parse data on the seized devices and report to the investigator the information that is necessary to meet 4th Amendment restrictions on scope of preservation letters and warrants. In addition to generating a report, it will also export the data in a format that can be imported into the major computer forensics tools for further analysis. ca/ncf