Since its birth in the early 90 ’s,digital forensics has been mainly focused on collecting and examining digital evidence from computers and networks that are controlled and owned by individuals or organizations.As cloud computing has recently emerged as a dominant platform for running applications and storing data,digital forensics faces well-known challenges in the cloud,such as data inaccessibility,data and service volatility,and law enforcement lacks control over the cloud.To date,very little research has been done to develop efficient theory and practice for digital forensics in the cloud.In this paper,we present a novel framework,Cloud Foren,which systematically addresses the challenges of forensics in cloud computing.Cloud Foren covers the entire process of digital forensics,from the initial point of complaint to the final point where the evidence is confirmed.The key components of Cloud Foren address some challenges,which are unique to the cloud.The proposed forensic process allows cloud forensic examiner,cloud provider,and cloud customer collaborate naturally.We use two case studies to demonstrate the applicability of Cloud Foren.We believe Cloud Foren holds great promise for more precise and automatic digital forensics in a cloud computing environment. Since its birth in the early 90’s, digital forensics has been mainly focused on collecting and examining digital evidence from computers and networks that are controlled and owned by individuals or organizations. As cloud computing has recently emerged as a dominant platform for running applications and storing data, digital forensics faces well-known challenges in the cloud, such as data inaccessibility, data and service volatility, and law enforcement lacks control over the cloud.To date, very little research has been done to develop efficient theory and practice for digital forensics in the cloud. this paper, we present a novel framework, Cloud Foren, which systematically addresses the challenges of forensics in cloud computing. Cloud Foren covers the entire process of digital forensics, from the initial point of complaint to the final point where the evidence is confirmed. The key components of Cloud Foren address some challenges, which are unique to the cloud. proposed forensic process al l cloud cloud forensic examiner, cloud provider, and cloud customer collaborate naturally. We use two case studies to demonstrate the applicability of Cloud Foren. We believe Cloud Foren holds great promise for more precise and automatic digital forensics in a cloud computing environment.