# Cloud and Email Forensics

> Master cloud and email forensics. Learn to investigate Microsoft 365, Google Workspace, email headers, and cloud logs for modern DFIR incidents.

Canonical: https://codelivly.com/learning-paths/cloud-and-email-forensics
Last updated: 2026-09-17

| | |
|---|---|
| Level | Intermediate |
| Category | Forensics |
| Rooms | 3 |
| Lessons | 11 |
| Estimated time | 1 h 30 min |

This learning path provides a comprehensive foundation in Cloud and Email Forensics, a critical discipline in modern Digital Forensics and Incident Response (DFIR). You will learn the methodologies for investigating cloud environments like Microsoft 365 and Google Workspace, analyzing email headers, tracing phishing campaigns, extracting mailbox artifacts, and understanding cloud logging (e.g., Unified Audit Logs). By mastering cloud and email forensics, you will be equipped to track lateral movement, uncover Business Email Compromise (BEC), and produce legally defensible reports for corporate investigations.

## Rooms in this path

1. [Cloud Forensics Fundamentals](https://codelivly.com/rooms/cloud-forensics-fundamentals) - Master the basics of cloud forensics. Learn the differences between IaaS, PaaS, and SaaS, acquisition challenges, and…
2. [Email Header and Metadata Analysis](https://codelivly.com/rooms/email-header-and-metadata-analysis) - Master email header analysis. Learn to trace email origins, analyze SMTP routing, and extract metadata for phishing and…
3. [SaaS and Collaboration Platform Investigations](https://codelivly.com/rooms/saas-and-collaboration-platform-investigations) - Master SaaS and collaboration platform investigations. Learn to analyze M365, Google Workspace, and Slack logs for data…

## Related

- [Career path: Digital Forensics](https://codelivly.com/career-paths/digital-forensics)
- [Reverse Engineering Fundamentals](https://codelivly.com/learning-paths/reverse-engineering-fundamentals)
- [Legal Procedure and Expert Testimony](https://codelivly.com/learning-paths/legal-procedure-and-expert-testimony)
- [Timeline Analysis and Artifact Correlation](https://codelivly.com/learning-paths/timeline-analysis-and-artifact-correlation)