International Journal of Security
The research proposed in this paper focuses on gathering evidence from devices with UNIX/Linux systems (in particular on Ubuntu 14.04 and Android OS), and Windows 8.1, in order to find artifacts left by cloud storage applications that suggests their use even after the deletion of the applications. The work performed aims to expand upon the prior work done by other researches in the field of cloud forensics and to show an example of analysis. We show where and what type of data remnants can be found using our analysis and how this information can be used as evidence in a digital forensic investigation.
Malik, Rakesh, Narasimha Shashidhar, Lei Chen.
"Cloud Storage Client Application Analysis."
International Journal of Security, 9 (1): 1-14.