# Cloud Forensics Fundamentals

> Master the basics of cloud forensics. Learn the differences between IaaS, PaaS, and SaaS, acquisition challenges, and foundational investigation concepts.

Canonical: https://codelivly.com/rooms/cloud-forensics-fundamentals
Last updated: 2026-09-17

| | |
|---|---|
| Level | Beginner |
| Category | Forensics |
| Lessons | 4 |
| Estimated time | 30 min |
| XP | 100 |

This foundational module introduces the core principles of cloud forensics within Digital Forensics and Incident Response (DFIR). You will learn the critical differences between traditional on-premises forensics and cloud environments (IaaS, PaaS, SaaS), the unique challenges of data acquisition and multi-tenant jurisdiction, and the foundational concepts of cloud logging and identity management. By mastering these fundamentals, you will build the essential knowledge required to navigate, investigate, and extract digital evidence from modern cloud platforms like Microsoft 365, Google Workspace, and AWS.

## Lessons

1. What Is Cloud Forensics and Why Does It Matter (30 min)
2. Shared Responsibility Model and Evidence Sources (30 min)
3. Acquiring Data from Cloud Storage Providers (30 min)
4. Guided Lab: Investigating a Cloud Storage Account (30 min)

## Related

- [Learning path: Cloud and Email Forensics](https://codelivly.com/learning-paths/cloud-and-email-forensics)
- [All rooms](https://codelivly.com/rooms)