Forensic collection of cloud storage data: Does the act of collection result in changes to the data or its metadata?

ACPO. Good practice guidelines for computer based evidence v4.0. In: Officers AoCP, editor. Association of Chief Police Officers; 2006.

Biggs, 2009, Cloud computing: the impact on digital forensic investigations, 1

Chung, 2012, Digital forensic investigation of cloud storage services, Digital Investigation, 10.1016/j.diin.2012.05.015

Clarke, 2013

Dropbox, 2012

DropBox, 2013

DropBox, 2013

DropBox, 2013

Dykstra, 2012, Acquiring forensic evidence from infrastructure-as-a-service cloud computing: exploring and evaluating tools, trust, and techniques, Digital Investigation, 10.1016/j.diin.2012.05.001

Google, 2012

Google, 2013

Kleynhans, 2012

Klimt, 2004, Introducing the Enron corpus

Malik

McClain, 2011

McClain, 2012

McKemmish, 1999, What is forensic computing? Trends and issues in crime and criminal justice, Australian Institute of Criminology, 118, 1

Mell, 2011

Microsoft, 2013

NIJ, 2004

NIJ, 2008

Quick, 2013, Digital droplets: Microsoft SkyDrive forensic data remnants, Future Generation Computer Systems, 29, 1378, 10.1016/j.future.2013.02.001

Quick, 2013, Dropbox analysis: data remnants on user machines, Digital Investigation, 10, 3, 10.1016/j.diin.2013.02.003

Roach

Rosenberg

Ruan, 2011, Cloud forensics, 35

SAI, 2003

Sinofsky, 2012

Tadjer

Taylor, 2011, Forensic investigation of cloud computing systems, Network Security, 2011, 4, 10.1016/S1353-4858(11)70024-1

United States Department of States, 2013, Money laundering and financial crimes, vol. II