Cloud Security Podcast by Google
EP158 Ghostbusters for the Cloud: Who You Gonna Call for Cloud Forensics
Feb 5, 2024
Jason Solomon, Security Engineer at Google, discusses the challenges of cloud forensics, including establishing a chain of custody and knowing when to call for help. He shares advice for security leaders on how to prepare for incidents and highlights recommended reading for cloud forensics.
21:33
Episode guests
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Cloud forensics in the cloud requires knowledge of Linux forensics and scaling systems like Kubernetes.
- Preparation, including setting up a response plan and leveraging cloud audit logs, is key to effective incident response in the cloud.
Deep dives
Importance of Cloud Forensics
Cloud forensics presents unique challenges compared to traditional computer forensics, but the principles remain the same. Acquiring data in the cloud is typically done through telemetry and targeted artifact acquisition. Cloud logging plays a crucial role in investigations, providing valuable information for analysis. While forensics skills are still essential, knowledge of Linux forensics and scaling systems like Kubernetes is necessary to navigate cloud environments.
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
