In this session, CloudPassage Chief Evangelist Andrew Hay will address the forensic and IR challenges of investigating servers and applications in cloud environments in addition to the opportunities that cloud presents to help expedite forensic investigations. Topics that will be discussed include: • Traditional forensics and IR • Cloud architectural challenges for responders • Chain-of-custody and legal issues across architectures and regions • How existing forensics/IR tools can help - and what they can do better • Advantages of conducting forensics/IR in cloud environments