Cloud Forensics Tool Prototyping

This project will leverage The University of Rhode Island's previous basic research on cloud application artifacts to create Cloud Signature, a prototype software tool for law enforcement investigators to quickly obtain the specifics of what to request in a warrant to a cloud application service provider. This tool will scan a seized device (e.g. computer, phone, iPad, etc.) to identify the cloud applications that have been used and gather remnants that the applications leave behind. The tool will be easy to update as the developers and the community identify new cloud applications. Cloud Signature will parse data on the seized devices and report to the investigator the information that is necessary to meet 4th Amendment restrictions on scope of preservation letters and warrants. In addition to generating a report, it will also export the data in a format that can be imported into the major computer forensics tools for further analysis. The Cloud Signature tool will be released free to state and local law enforcement. ca/ncf