In live examination,

checking for the evidence of encrypted data is important. It can be done by

checking active processes to see whether any process related to encryption is

running.

Extracting logs from

networking devices known as network log mining involves identification,

extraction, arranging, and examining the log data.

Most of the cloud applications

create an entry in the _____ which provides valuable information to the cyber

forensic expert.

_____ is a newly developed subset under cloud forensics, and this model

of cloud computing focuses on providing forensic services over the cloud.