Investigation of Android Device for Discovering Hadoop Cloud Storage Artifacts

Hadoop Cloud Storage has been embraced byboth individuals and organizations as it can offercost-effective, large capacity storage and multifunctionalservices on a wide range of device. It isfast raising popularity to access Hadoop Cloudservices via Android device. The widespread usage ofHadoop Cloud Storage could create the environmentthat is potentially conducive to malicious activitiesand illegal operations. Thus, the investigation ofHadoop Cloud presents the emerging challenge forthe digital forensic community. Extracting residualartifacts from the cloud server is potentially difficultdue to privacy policies followed by cloud providers.The attached Android device may store usefulartifacts to investigate the illegal usages of HadoopCloud Storage. This paper utilizes ClouderaDistribution Hadoop (CDH); a popular HadoopCloud Storage. This paper conducts a preliminaryinvestigation to locate and extract the residualartifacts from Android device that has accessed theCDH Cloud. The extracted artifacts can assist theforensic examiners in real world Hadoop Cloudforensics. The crime scenario which is extended theForensic Copra’s crime case is examined under theguide of CDH Forensic Investigation Framework