CLD-011 Cloud Services
Can one person use several cloud accounts?¶
Yes. A person may use personal, work, anonymous, backup, administrator, temporary or service accounts that do not obviously appear connected.
Evidence and questions to consider¶
- common devices and browser profiles;
- IP addresses and login patterns;
- recovery details and payment methods;
- telephone numbers and usernames;
- shared files and synchronisation folders;
- saved sessions, notifications and application data.
Keep the sources separate¶
A provider record, customer-administrator report, application screen and device artefact may describe related activity without proving the same thing. Preserve exact identifiers, dates, times and time zones, and test shared access, delegation, automation, compromise and changing account control.
Key takeaway
Look for connected accounts, but corroborate shared indicators before treating them as common control.