  Cloud storage services such as Dropbox, Box and SugarSync have been embraced
by both individuals and organizations. This creates an environment that is
potentially conducive to security breaches and malicious activities. The
investigation of these cloud environments presents new challenges for the
digital forensics community. It is anticipated that smartphone devices will
retain data from these storage services. Hence, this research presents a
preliminary investigation into the residual artifacts created on an iOS and
Android device that has accessed a cloud storage service. The contribution of
this paper is twofold. First, it provides an initial assessment on the extent
to which cloud storage data is stored on these client-side devices. This view
acts as a proxy for data stored in the cloud. Secondly, it provides
documentation on the artifacts that could be useful in a digital forensics
investigation of cloud services.
