Research Area:  Digital Forensics
Forensic examinations of a mobile phone that consider only the internal memory can miss potentially vital data that is accessible from the device, but not stored locally. In this paper, we look at a forensic tool that is able to download data stored on the cloud, using credentials gleaned from device extractions. Through experimention with a variety of devices and configurations, we examine the effectiveness of the software for its stated purpose. The results suggest that we are able to obtain information from the cloud in this manner, but only under some relatively strong assumptions. Practical issues and legal considerations are discussed.
Keywords:  
Author(s) Name:  John Bjornson; Aaron Hunter
Journal name:  
Conferrence name:  14th Annual Conference on Privacy, Security and Trust (PST)
Publisher name:  IEEE
DOI:  10.1109/PST.2016.7906927
Volume Information:  
Paper Link:   https://ieeexplore.ieee.org/abstract/document/7906927