Carney Forensics Blog

Exemplary Evidence: “Discover Cloud Evidence on Smartphones and Computers”

cloud evidence on smartphones and computers
Cloud evidence on smartphones and computers gives clues to the discovery and analysis of connected online cloud accounts. (John Carney)

I wrote a second article for Minnesota Lawyer this month after the holiday to develop further the discovery of cloud evidence on smartphones and computers under the series title “Exemplary Evidence“.  It introduces the concept of the Internet of Things which unites them.

The article introduces the famous Dr. Edmond Locard, a French criminologist and pioneer of forensic science.  He is often informally called the “Sherlock Holmes of France.”  And he said in relation to forensic evidence, “Every contact leaves a trace.”  His concise theory became known as Locard’s exchange principle. It is the basis for all forensic science as we know it today.

Locard asserts the actions a person takes leave behind remnants or trace evidence. Today those traces transcend familiar examples like fingerprints and hair follicles. Now digital traces include a computer’s web browser cache. Or a smartphone’s deleted text messages. Or resilient date and time stamps buried deep within documents, photographs, and videos.

The smartphone or computer provides clues to the discovery of user cloud accounts. For example, when a digital forensic examiner recovers evidence, its analysis often leads to online, cloud sources for further investigation. Therefore they may identify connections between the cloud evidence on smartphones or computers. FYI, these connections are often called the Internet of Things. As a result, the analysis can prove document movement or other cloud activity relevant to the investigation.

What promising clues can the legal team discover from cloud evidence on smartphones and computers? Clues to identity and prioritize online, cloud evidence worthy of investigation? Please read on at Minnesota Lawyer to find out the answers here: