domains / families / security / performing-cloud-forensics-investigation

performing-cloud-forensics-investigation

separate

Collect and analyze cloud forensic evidence using AWS CLI, Azure CLI, or gcloud

When to use

• When investigating a security breach in AWS, Azure, or GCP cloud environments
• For collecting volatile and non-volatile evidence from cloud infrastructure
• When tracing unauthorized access through cloud service API logs
• During incident response requiring preservation of cloud-based evidence
• For analyzing compromised virtual machines, containers, or serverless functions

Skill page

Source