ARCHERY ITCloud Forensics
Analysis of Microsoft Azure, AWS and custom hosted environments.
Investigation and analysis of cloud environments, including Microsoft Azure and Amazon Web Services, together with consulting on custom hosted environments. We review configuration, identity and activity logs to establish what happened and where the risks are.
Who it’s for
- Organisations running workloads in Azure or AWS
- Teams investigating suspicious account or resource activity
- Businesses reviewing hosted environments
What we examine
- Identity and access activity
- Audit and activity logs
- Resource and security configuration
- Storage and data-exposure risks
How an engagement works
Access arrangement
We agree read-only access and the accounts, subscriptions or tenants in scope.
Collection
Relevant logs and configuration are exported and preserved.
Analysis
Activity and configuration are reviewed against the agreed questions.
Reporting
Findings, risks and recommended remediation.
What you need
- Authority from the account owner
- Appropriate read-only access
- Log retention covering the period of interest
What you receive
- Findings report
- Configuration risk summary
- Remediation road map
Limitations. Cloud providers retain logs for limited periods, and some logs must be enabled in advance. What can be reconstructed depends on the logging that was in place.
Please don’t upload evidence or send passwords through this website. Once we’ve discussed your matter, we’ll arrange a secure handover with a documented chain of custody. How evidence is handled.