DFIRHub

CloudStorage_All

Cloud Storage Contents and Metadata

  • Compound
  • 64 paths from 15 artifacts
  • Per-user data
  • Version 1.4
  • Chad Tilbury and Andrew Rathbun

Paths on disk

64 paths from 15 targets

Paths use Windows environment variable syntax

Includes 8 targets

Each one is collected with this target

Notes

For those looking to contribute to this list, check here for ideas: https://en.wikipedia.org/wiki/Comparison_of_online_backup_services.

Install one of the applications not covered above and find where useful information is stored. If useful information can be located, make an individual Target for it and place in the appropriate folder. Then, include that Target in the appropriate Compound Target.