I imagine the records request positions at Google, Microsoft, Facebook, and Apple are around-the-clock, full time gigs. There are self-service features built into the admin consoles for my Enterprise G-Suite clients, but the data they’re able to pull hardly qualifies as forensic artifact evidence. Now that this corporate data is sitting in the cloud, we’re typically making requests for logs and deleted data — something that the internet giants are unwilling to do without a subpoena and, even then, it’s a coin toss.  

I wonder if the $45 subpoena fee for law enforcement covers simple email and document retrieval for a single custodian or whether it also covers additional forensic artifact evidence related to these custodians that we typically need from cloud platforms in private sector investigations and disputes.

***** 

Subscribe to the Digital Forensics Future (DFF) newsletter here: http://bit.ly/dffsubstack  

The Digital Forensics Future (DFF) podcast is also available on the platforms below.  

Apple Podcasts: https://itunes.apple.com/us/podcast/digital-forensics-forecast-dff/id1452113840
Google Podcasts: https://www.google.com/podcasts?feed=aHR0cHM6Ly9hbmNob3IuZm0vcy84Y2Q4MDE4L3BvZGNhc3QvcnNz
Spotify: https://open.spotify.com/show/6cCgh0OGFRQhC4tfeQYTxu

 *****

Jerry Bui is the Executive Director of Digital Forensics within Lighthouse’s Advisory group focused on governance, risk and compliance issues. Jerry is a Certified Fraud Examiner and has over 15 years of experience in digital forensics, ediscovery, automated risk assessments, dashboard compliance monitoring, and investigative analytics. Jerry’s team provides evidence acquisition, expert witness, and strategic consulting services to law firms and corporations. 

Connect with Jerry on social media:  

LinkedIn: https://www.linkedin.com/in/jerrybui/
Twitter: https://twitter.com/lhjbui
Facebook: https://www.facebook.com/lhdfir/