{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,19]],"date-time":"2026-05-19T16:23:04Z","timestamp":1779207784061,"version":"3.51.4"},"reference-count":55,"publisher":"Springer Science and Business Media LLC","issue":"9","license":[{"start":{"date-parts":[[2022,4,17]],"date-time":"2022-04-17T00:00:00Z","timestamp":1650153600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2022,4,17]],"date-time":"2022-04-17T00:00:00Z","timestamp":1650153600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Computing"],"published-print":{"date-parts":[[2022,9]]},"DOI":"10.1007\/s00607-022-01077-2","type":"journal-article","created":{"date-parts":[[2022,4,17]],"date-time":"2022-04-17T11:02:40Z","timestamp":1650193360000},"page":"2005-2030","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["An insight into cloud forensic readiness by leading cloud service providers: a survey"],"prefix":"10.1007","volume":"104","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3334-8129","authenticated-orcid":false,"given":"Pranitha","family":"Sanda","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Digambar","family":"Pawar","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"V.","family":"Radha","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2022,4,17]]},"reference":[{"key":"1077_CR1","unstructured":"CapitalOne (2019) Capital one announces data security incident. https:\/\/www.capitalone.com\/about\/newsroom\/capital-one-announces-data-security-incident\/"},{"key":"1077_CR2","unstructured":"Saroha A (2020) U.S. pharma giant suffers data breach, exposes private data of drug users. https:\/\/www.thehindu.com\/sci-tech\/technology\/ us-pharma-giant-suffers-data-breach-exposes-private-data-of-drug-users \/article32918868.ecel"},{"key":"1077_CR3","unstructured":"Amazon (2021) Amazon law enforcement guidelines. https:\/\/d1.awsstatic.com\/certifications\/Amazon_LawEnforcement_Guidelines.pdf"},{"key":"1077_CR4","unstructured":"Microsoft (2021) Corporate social responsibility. https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/us-national-security -orders-report ? activetab=pivot_1:primaryr3"},{"key":"1077_CR5","unstructured":"Google (2021) Google transparency report. https:\/\/transparencyreport.google.com\/user-data\/us-national-security?hl=en"},{"key":"1077_CR6","doi-asserted-by":"publisher","first-page":"S64","DOI":"10.1016\/j.diin.2010.05.009","volume":"7","author":"SL Garfinkel","year":"2010","unstructured":"Garfinkel SL (2010) Digital forensics research: the next 10 years. Digit Investig 7:S64\u2013S73. https:\/\/doi.org\/10.1016\/j.diin.2010.05.009","journal-title":"Digit Investig"},{"issue":"18","key":"1077_CR7","doi-asserted-by":"publisher","first-page":"6285","DOI":"10.1002\/sec.1688","volume":"9","author":"S Simou","year":"2016","unstructured":"Simou S, Kalloniatis C, Gritzalis S, Mouratidis H (2016) A survey on cloud forensics challenges and solutions. Secur Commun Netw 9(18):6285\u20136314. https:\/\/doi.org\/10.1002\/sec.1688","journal-title":"Secur Commun Netw"},{"key":"1077_CR8","unstructured":"Dykstra J, Sherman AT (2011) Understanding issues in cloud forensics: two hypothetical case studies. UMBC Computer Science and Electrical Engineering Department"},{"key":"1077_CR9","unstructured":"Zawoad S, Hasan R (2013) Cloud forensics: a meta-study of challenges, approaches, and open problems. arXiv preprint arXiv:1302.6312https:\/\/arxiv.org\/pdf\/1302.6312.pdf"},{"issue":"1","key":"1077_CR10","doi-asserted-by":"publisher","first-page":"34","DOI":"10.1016\/j.diin.2013.02.004","volume":"10","author":"K Ruan","year":"2013","unstructured":"Ruan K, Carthy J, Kechadi T, Baggili I (2013) Cloud forensics definitions and critical criteria for cloud forensic capability: an overview of survey results. Digit Investig 10(1):34\u201343. https:\/\/doi.org\/10.1016\/j.diin.2013.02.004","journal-title":"Digit Investig"},{"issue":"4","key":"1077_CR11","doi-asserted-by":"publisher","first-page":"20","DOI":"10.1109\/MCC.2014.69","volume":"1","author":"B Martini","year":"2014","unstructured":"Martini B, Choo KKR (2014) Cloud forensic technical challenges and solutions: a snapshot. IEEE Cloud Comput 1(4):20\u201325. https:\/\/doi.org\/10.1109\/MCC.2014.69","journal-title":"IEEE Cloud Comput"},{"key":"1077_CR12","unstructured":"Group NCCFSW et al (2014) Nist cloud computing forensic science challenges. Technical report, National Institute of Standards and Technology"},{"key":"1077_CR13","doi-asserted-by":"publisher","unstructured":"Herman M, Iorga M, Salim AM, Jackson RH, Hurst MR, Leo R, Lee R, Landreville NM, Mishra AK, Wang Y et\u00a0al (2020) Nist cloud computing forensic science challenges. Technical report, National Institute of Standards and Technology, https:\/\/doi.org\/10.6028\/NIST.IR.8006","DOI":"10.6028\/NIST.IR.8006"},{"issue":"6","key":"1077_CR14","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3361216","volume":"52","author":"B Manral","year":"2019","unstructured":"Manral B, Somani G, Choo KKR, Conti M, Gaur MS (2019) A systematic survey on cloud forensics challenges, solutions, and future directions. ACM Comput Surv (CSUR) 52(6):1\u201338. https:\/\/doi.org\/10.1145\/3361216","journal-title":"ACM Comput Surv (CSUR)"},{"key":"1077_CR15","doi-asserted-by":"publisher","first-page":"38","DOI":"10.1016\/j.diin.2015.03.002","volume":"13","author":"A Pichan","year":"2015","unstructured":"Pichan A, Lazarescu M, Soh ST (2015) Cloud forensics: technical challenges, solutions and comparative analysis. Digit Investig 13:38\u201357. https:\/\/doi.org\/10.1016\/j.diin.2015.03.002","journal-title":"Digit Investig"},{"key":"1077_CR16","doi-asserted-by":"crossref","unstructured":"Ruan K, Carthy J, Kechadi T, Crosbie M (2011) Cloud forensics. In: IFIP international conference on digital forensics. Springer, pp 35\u201346","DOI":"10.1007\/978-3-642-24212-0_3"},{"key":"1077_CR17","unstructured":"Raj B, Bob G, Dennis S, David W, Ji K (2020) Magic quadrant for cloud infrastructure as a service, worldwide. https:\/\/www.gartner.com\/en\/documents\/3989743\/magic-quadrant-for-cloud-infrastructure-and-platform-ser"},{"key":"1077_CR18","unstructured":"Amazon (2020) Simplify security incident response and digital forensics on aws. https:\/\/aws.amazon.com\/mp\/scenarios\/security\/forensics\/"},{"key":"1077_CR19","unstructured":"Barry\u00a0Conway MA (2019) Automated forensics and incident response on aws. https:\/\/anz-resources.awscloud.com\/aws-summit-sydney-2019-secure\/automated-forensics-and-incident-response-on-aws-3"},{"key":"1077_CR20","unstructured":"Ben\u00a0Ridgway FS (2016) Microsoft azure security response in the cloud. https:\/\/gallery.technet.microsoft.com\/azure-security-response-in-dd18c678\/file\/150826\/4\/MicrosoftAzureSecurityResponseinthecloud.pdf"},{"key":"1077_CR21","unstructured":"Microsoft (2020) Computer forensics in azure. https:\/\/docs.microsoft.com\/en-us\/azure\/architecture\/example-scenario\/forensics\/"},{"key":"1077_CR22","unstructured":"Zuhuruddin S (2018) Cloud forensics. https:\/\/cloud.withgoogle.com\/next18\/sf\/sessions\/session\/156791"},{"issue":"1","key":"1077_CR23","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/2906149","volume":"49","author":"S Khan","year":"2016","unstructured":"Khan S, Gani A, Wahab AWA, Bagiwa MA, Shiraz M, Khan SU, Buyya R, Zomaya AY (2016) Cloud log forensics: foundations, state of the art, and future directions. ACM Comput Surv (CSUR) 49(1):1\u201342. https:\/\/doi.org\/10.1145\/2906149","journal-title":"ACM Comput Surv (CSUR)"},{"key":"1077_CR24","doi-asserted-by":"crossref","unstructured":"Raju BK, Geethakumari G (2018) Timeline-based cloud event reconstruction framework for virtual machine artifacts. In: Progress in intelligent computing techniques: theory, practice, and applications. Springer, pp 31\u201342","DOI":"10.1007\/978-981-10-3376-6_4"},{"key":"1077_CR25","doi-asserted-by":"publisher","unstructured":"Raju BK, Gosala NB, Geethakumari G (2017) Closer: applying aggregation for effective event reconstruction of cloud service logs. In: Proceedings of the 11th international conference on ubiquitous information management and communication, pp 1\u20138. https:\/\/doi.org\/10.1145\/3022227.3022288","DOI":"10.1145\/3022227.3022288"},{"key":"1077_CR26","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.diin.2019.02.005","volume":"29","author":"H Studiawan","year":"2019","unstructured":"Studiawan H, Sohel F, Payne C (2019) A survey on forensic investigation of operating system logs. Digit Investig 29:1\u201320. https:\/\/doi.org\/10.1016\/j.diin.2019.02.005","journal-title":"Digit Investig"},{"key":"1077_CR27","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2020.114488","volume":"168","author":"H Kwon","year":"2020","unstructured":"Kwon H, Lee S, Jeong D (2020) User profiling via application usage pattern on digital devices for digital forensics. Expert Syst Appl 168:114488. https:\/\/doi.org\/10.1016\/j.eswa.2020.114488","journal-title":"Expert Syst Appl"},{"key":"1077_CR28","unstructured":"Amazon (2020) Amazon cloudwatch logs user guide. https:\/\/docs.aws.amazon.com\/AmazonCloudWatch\/latest\/logs\/WhatIsCloudWatchLogs.html"},{"key":"1077_CR29","unstructured":"Amazon (2020) Centralized logging. https:\/\/aws.amazon.com\/solutions\/implementations\/centralized-logging\/"},{"key":"1077_CR30","unstructured":"Amazon (2020) Collecting metrics and logs from amazon ec2 instances and on-premises servers with the cloudwatch agent. https:\/\/docs.aws.amazon.com\/AmazonCloudWatch\/latest\/monitoring\/Install-CloudWatch-Agent.html"},{"key":"1077_CR31","doi-asserted-by":"crossref","unstructured":"Amazon (2020) Aws security incident response guide. https:\/\/d1.awsstatic.com\/whitepapers\/aws_security_incident_response.pdf","DOI":"10.1002\/9781119658856.ch1"},{"key":"1077_CR32","unstructured":"Amazon (2020) Amazon cloudwatch features. https:\/\/aws.amazon.com\/cloudwatch\/features\/"},{"key":"1077_CR33","unstructured":"Amazon (2016) Native aws security-logging capabilities. https:\/\/d0.awsstatic.com\/aws-answers\/AWS_Native_Security_Logging_Capabilities.pdf"},{"key":"1077_CR34","unstructured":"Assaf N (2017) How to protect data at rest with amazon ec2 instance store encryption. https:\/\/aws.amazon.com\/blogs\/security \/how-to-protect- data-at-rest-with- amazon- ec2 -instance-store-encryption\/"},{"key":"1077_CR35","unstructured":"Amazon (2020) Amazon cloudwatch logs. https:\/\/docs.aws.amazon.com\/AmazonCloudWatch\/latest\/logs\/WhatIsCloudWatchLogs.html"},{"key":"1077_CR36","unstructured":"Brian W, Rita, David C, Piyush M (2019) Azure monitor overview. https:\/\/docs.microsoft.com\/en-us\/azure\/azure-monitor\/overview"},{"key":"1077_CR37","unstructured":"Brian W, David C, Henry S, Swathi D (2021) Review of azure monitor agents. https:\/\/docs.microsoft.com\/en-us\/azure\/azure-monitor\/agents\/agents-overview"},{"key":"1077_CR38","unstructured":"Brian\u00a0Wren DC (2021) Log analytics agent overview. https:\/\/docs.microsoft.com\/en-us\/azure\/azure-monitor\/agents\/log-analytics-agent"},{"key":"1077_CR39","unstructured":"Azure (2021) Azure log analytics. https:\/\/azure.microsoft.com\/en-in\/blog\/tag\/log-analytics\/"},{"key":"1077_CR40","unstructured":"Terry L, David C, Dennis L, Brian W, Dan M, Baldwin M, Barbara K (2019) Azure security logging and auditing. https:\/\/docs.microsoft.com\/en-us\/azure\/security\/fundamentals\/log-audit"},{"key":"1077_CR41","unstructured":"Tamra M, David C, Mark H, Norm E (2020) Azure storage encryption for data at rest. https:\/\/docs.microsoft.com\/en-us\/azure\/storage\/common\/storage-service-encryption"},{"key":"1077_CR42","unstructured":"Brian W, Swathi D, David C, Bharath N, Yossi Y (2020) Manage usage and costs with azure monitor logs. https:\/\/docs.microsoft.com\/en-us\/azure\/azure-monitor\/platform\/manage-cost-storage"},{"key":"1077_CR43","unstructured":"Google (2020) Google cloud\u2019s operations suite. https:\/\/cloud.google.com\/products\/operations"},{"key":"1077_CR44","unstructured":"Google (2020) Cloud logging documentation. https:\/\/cloud.google.com\/logging\/docs"},{"key":"1077_CR45","unstructured":"Google (2020) Cloud monitoring documentation. https:\/\/cloud.google.com\/monitoring\/docs"},{"key":"1077_CR46","unstructured":"Google (2020) Google available logs. https:\/\/cloud.google.com\/logging\/docs\/view\/available-logs"},{"key":"1077_CR47","unstructured":"Google (2020) Hashes and etags: best practices. https:\/\/cloud.google.com\/storage\/docs\/hashes-etags#_CRC32C"},{"key":"1077_CR48","unstructured":"Google (2020) Encryption at rest in google cloud. https:\/\/cloud.google.com\/security\/encryption-at-rest\/default-encryption"},{"key":"1077_CR49","unstructured":"Google (2020) Logs retention. https:\/\/cloud.google.com\/logging\/docs\/storage"},{"key":"1077_CR50","unstructured":"Amazon (2020) How s3 object lock works. https:\/\/docs.aws.amazon.com\/AmazonS3\/latest\/userguide\/object-lock-overview.html#object-lock-legal-holds"},{"key":"1077_CR51","unstructured":"Microsoft (2020) Digital evidence capture. https:\/\/github.com\/mspnp\/solution-architectures\/tree\/master\/forensics"},{"key":"1077_CR52","unstructured":"Microsoft (2018) Corporate social responsibility. https:\/\/azure.microsoft.com\/en-in\/blog\/immutable-storage-for-azure-storage-blobs-now-generally-available\/"},{"key":"1077_CR53","unstructured":"Google (2021) Google transparency report. https:\/\/cloud.google.com\/storage\/docs\/object-holds"},{"key":"1077_CR54","unstructured":"Google (2020) Google rapid response. https:\/\/github.com\/google\/grr"},{"key":"1077_CR55","unstructured":"Google (2021) Identity and access management. https:\/\/cloud.google.com\/iam\/docs\/overview"}],"container-title":["Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00607-022-01077-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s00607-022-01077-2\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00607-022-01077-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,8,22]],"date-time":"2022-08-22T16:05:12Z","timestamp":1661184312000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s00607-022-01077-2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,4,17]]},"references-count":55,"journal-issue":{"issue":"9","published-print":{"date-parts":[[2022,9]]}},"alternative-id":["1077"],"URL":"https:\/\/doi.org\/10.1007\/s00607-022-01077-2","relation":{},"ISSN":["0010-485X","1436-5057"],"issn-type":[{"value":"0010-485X","type":"print"},{"value":"1436-5057","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,4,17]]},"assertion":[{"value":"12 July 2021","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"8 March 2022","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"17 April 2022","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors have no conflicts of interest to declare that are relevant to the content of this article.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}]}}