{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,13]],"date-time":"2026-10-13T21:47:24Z","timestamp":1791928044525,"version":"4.3.4"},"reference-count":16,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,12,1]],"date-time":"2026-12-01T00:00:00Z","timestamp":1796083200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,7,25]],"date-time":"2026-07-25T00:00:00Z","timestamp":1784937600000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["MethodsX"],"published-print":{"date-parts":[[2026,12]]},"DOI":"10.1016\/j.mex.2026.104075","type":"journal-article","created":{"date-parts":[[2026,7,26]],"date-time":"2026-07-26T13:37:51Z","timestamp":1785073071000},"page":"104075","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Cloud evidence lifecycle framework: a six-stage log-centric method for multi-tenant AWS forensic investigations"],"prefix":"10.1016","volume":"17","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-1446-4961","authenticated-orcid":false,"given":"Devyansh","family":"Gupta","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dhruvi","family":"Bagga","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Prabhakaran","family":"Abraham","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.mex.2026.104075_bib0001","doi-asserted-by":"crossref","first-page":"28","DOI":"10.4018\/jdcf.2012040103","article-title":"Calm before the storm: the challenges of cloud computing in digital forensics","volume":"4","author":"Grispos","year":"2012","journal-title":"Int. J. Digit. Crime Forensic."},{"key":"10.1016\/j.mex.2026.104075_bib0002","doi-asserted-by":"crossref","first-page":"6285","DOI":"10.1002\/sec.1688","article-title":"A survey on cloud forensics challenges and solutions","volume":"9","author":"Simou","year":"2016","journal-title":"Secur. Commun. Netw."},{"key":"10.1016\/j.mex.2026.104075_bib0003","series-title":"Proceedings of the International Conference on Digital Forensics and Cyber Crime","first-page":"1","article-title":"Analysis of the current state of cloud forensics: the evolving nature of digital forensics","author":"Yankson","year":"2015"},{"key":"10.1016\/j.mex.2026.104075_bib0005","first-page":"22","article-title":"An integrated model to make cloud authentication and multi-tenancy more secure","volume":"178","author":"Dey","year":"2017","journal-title":"Int. J. Comput. Appl."},{"key":"10.1016\/j.mex.2026.104075_bib0006","first-page":"14","article-title":"Evidence and forensics in the cloud: challenges and future research directions","volume":"4","author":"Choo","year":"2018","journal-title":"Future Gener. Comput. Syst."},{"key":"10.1016\/j.mex.2026.104075_bib0004","first-page":"268","article-title":"Cloud forensics: challenges and techniques","author":"Ennajah","year":"2013","journal-title":"Proceed. IEEE Internat. Conferenc. Cloud Comput. Techn. Sci. (CloudCom)"},{"key":"10.1016\/j.mex.2026.104075_bib0016","series-title":"Proc. 2024 Int. Conf. Intell. Syst. Cybersecurity (ISCS)","article-title":"Advancing survey on multi-tenant cloud environments: challenges and solutions","author":"Shanker","year":"2024"},{"key":"10.1016\/j.mex.2026.104075_bib0010","article-title":"Cloud forensic tools and storage: a systematic mapping study","volume":"3","author":"Idugboe","year":"2026","journal-title":"GAS J. Eng. Technol."},{"key":"10.1016\/j.mex.2026.104075_bib0007","series-title":"Proceedings of the 2020 3rd International Conference on Artificial Intelligence and Big Data (ICAIBD)","first-page":"279","article-title":"Information fusion-based digital forensics framework in cloud environment","author":"Peng","year":"2020"},{"key":"10.1016\/j.mex.2026.104075_bib0008","doi-asserted-by":"crossref","first-page":"1037","DOI":"10.12785\/ijcds\/150173","article-title":"Forensics analysis of cloud-computing traffics","volume":"15","author":"Almutairi","year":"2024","journal-title":"Int. J. Comput. Digit. Syst."},{"key":"10.1016\/j.mex.2026.104075_bib0012","series-title":"Digital Forensic Readiness to Mitigate Insider Threats in the SaaS Cloud Environment","author":"Shoderu","year":"2024"},{"key":"10.1016\/j.mex.2026.104075_bib0011","series-title":"NIST Special Publication 800-207A","article-title":"A zero trust architecture model for access control in cloud-native applications in multi-location environments","author":"Chandramouli","year":"2023"},{"key":"10.1016\/j.mex.2026.104075_bib0014","series-title":"NIST Cloud Computing Forensic Reference architecture, NIST Special Publication 800-201","author":"Herman","year":"2024"},{"key":"10.1016\/j.mex.2026.104075_bib0013","doi-asserted-by":"crossref","first-page":"4546","DOI":"10.3390\/electronics13224546","article-title":"Forensic investigation capabilities of Microsoft Azure: a comprehensive analysis and its significance in advancing cloud cyber forensics","volume":"13","author":"Mori\u0107","year":"2024","journal-title":"Electronics"},{"key":"10.1016\/j.mex.2026.104075_bib0009","first-page":"3170","article-title":"Investigating advanced persistent threat tactics in cloud environments: a forensic study of AWS CloudTrail log data","volume":"10","author":"Ojo","year":"2025","journal-title":"Int. J. Innov. Sci. Res. Technol."},{"key":"10.1016\/j.mex.2026.104075_bib0015","article-title":"Enhancing DFIR in orchestration environments: real-time forensic framework with eBPF for Windows","volume":"53","author":"Jin","year":"2025","journal-title":"Digit. Investig."}],"container-title":["MethodsX"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2215016126002918?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2215016126002918?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,10,13]],"date-time":"2026-10-13T21:19:22Z","timestamp":1791926362000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S2215016126002918"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,12]]},"references-count":16,"alternative-id":["S2215016126002918"],"URL":"https:\/\/doi.org\/10.1016\/j.mex.2026.104075","relation":{},"ISSN":["2215-0161"],"issn-type":[{"value":"2215-0161","type":"print"}],"subject":[],"published":{"date-parts":[[2026,12]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Cloud evidence lifecycle framework: a six-stage log-centric method for multi-tenant AWS forensic investigations","name":"articletitle","label":"Article Title"},{"value":"MethodsX","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.mex.2026.104075","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 The Authors. Published by Elsevier B.V.","name":"copyright","label":"Copyright"}],"article-number":"104075"}}