Cloud Collection Authority

Related terms

MLAT

A treaty providing a framework for mutual legal assistance between states. Assistance may also be available under other legal arrangements; the process,...

Advanced Data Protection (ADP)

An optional iCloud protection setting extending end-to-end encryption to additional categories where available. Availability and account configuration must be verified.

Android Auto Backup

An Android app-data backup mechanism with developer/platform limits. It is not a complete raw device image or every Google service’s data.

CloudTrail

AWS event-recording services with management, data and other event categories. Coverage depends on service support, selection and retention.

EBS Snapshot

A point-in-time block-storage snapshot under its consistency and encryption conditions. It does not include guest RAM.

iCloud Backup

Apple's device backup service that stores a snapshot of an iOS or iPadOS device to Apple's servers, including app data, messages, photos,...

NIST IR 8006

A 2020 NIST report examining cloud forensic science challenges. It is a research/requirements reference, not a mandatory universal acquisition recipe.

OAuth Token Acquisition

Using supported authentication material for scoped remote collection. Validity, binding, permissions, expiry and legal authority must all be established.

Preservation Request

A formal letter sent to a platform asking it to freeze and retain specified account data pending formal legal process. Under 18...

TCC.db

An Apple privacy-consent database under version-specific schemas. Its retained state is not necessarily a complete chronological permission/use audit.

Explained in these topics

• Cloud Forensics: Multi-Tenancy, APIs and Jurisdictional ChallengesThe permission and legal process governing the actual account, data categories and actions. Tenant access rights and provider disclosure are separate.
• Mobile Cloud and Backup Forensics: iCloud and Google Drive