Usama Salama has published an article about Internet of Things (IoT) forensics. According to the author, sources of evidence on IoT can be categorized into three groups:
- All evidence collected from smart devices and sensors;
- All evidence collected from hardware and software that provide a communication between smart devices and the external world (e.g., computers, mobile, IPS, IDS and firewalls), which are included in traditional computer forensics; and
- All evidence collected from hardware and software that are outside the network under investigation. This group includes cloud, social networks, ISPs and mobile network providers, virtual online identities and the internet.
Learn more about it here.