A Distributed Snapshot Framework for Digital Forensics Evidence Extraction and Event Reconstruction from Cloud Environment

In a heterogeneous and volatile environment such as the cloud, recording the underlying infrastructure state - snapshot-is an important paradigm for analysis, testing and verification of properties associated with distributed executions. In case of crime or e-discovery investigation, possible execution might require to generate digital forensics evidences. The aim of this research is to generate distributed snapshot and extract evidences in a forensically sound manner. The paper will cover literature review outcomes, preliminary findings, research methodology and work in progress.