Extraction of Amazon EC2 and S3 services in Oxygen Remote Explorer.

June 26, 2024

AWS, an Amazon subsidiary, provides EC2 for virtual machines and S3 for storage, both supported in Oxygen Remote Explorer for data extraction and analysis.

Amazon Web Services Logo: A clear and recognizable image of the AWS logo to represent the brand.

Amazon Web Services, a subsidiary of Amazon, is among the largest hyperscale cloud providers globally, providing on-demand cloud computing platforms and APIs to individuals, companies, and governments, on a metered, pay-as-you-go basis. This division of Amazon provides servers, storage, networking, remote computing, email, mobile development, and security. The core Amazon Web Services products are EC2, a virtual machine service, and S3, a storage system.

  • Amazon EC2 (Amazon Elastic Compute Cloud) allows users to build virtual computers, known as an instance. An instance is a virtual server running on the AWS cloud. An instance allows users to run their own computer applications and services. Preconfigured images of varying operating systems are called an Amazon Machine Image or AMI and once built can be launched as virtual servers. Users may interact with the service via web interface, command-line interface or software.
  • Amazon S3 (Amazon Simple Storage Service) provides cloud storage, data processing, and analytics for any type and any volume of data at any time and from any location. S3 buckets are often used for websites, mobile applications, backup and restore, archives, IoT devices, and more.

Amazon EC2 and Amazon S3 support in Oxygen Remote Explorer

Amazon EC2 and Amazon S3 services are supported in Oxygen Remote Explorer, our innovative solution designed for enterprises, service providers and other organizations to aid in digital investigations of corporate incidents. It is a comprehensive tool used for extracting and analyzing data from workstations, mobile devices, and cloud services and offers the ability to collect vital information from these data sources remotely.

To extract data from Amazon EC2 and Amazon S3, open Cloud Extractor from the home screen of Oxygen Remote Explorer.  When all data has been entered, select from the list of supported services.

Screenshot of Cloud Extractor within Oxygen Remote Explorer viewing supported applications Amazon EC2 and Amazon S3

 

Authorization will be requested in the service via root or IAM.

 

Screenshot of window within Cloud Extractor, a tool within Oxygen Remote Explorer, asking for Authentication parameters for Amazon EC2 and Amazon S3Screenshot of window within Cloud Extractor, a tool within Oxygen Remote Explorer, asking for Authentication parameters for Amazon EC2 and Amazon S3

 

When credentials are entered and verified, the following can be extracted from the respective services:

Amazon EC2 – a list of servers and detailed information about each server.

Amazon S3:

  • Account information
  • Buckets (repositories) information
  • Buckets
  • Revisions
  • Intellectual multi-level archive configuration
  • Tools configuration
  • Bucket access list
  • File access list

If you need this feature for your investigations but do not have Oxygen Remote Explorer, contact us.

By submitting a form you are agreeing to our Privacy Policy.