Method and System for Forensic Data Tracking

A forensic computing platform deployed as a cloud control server which comprises an analytic component, a reporting component, an alert component, a business logic component, a policy database, a user database, a meta database and a settings database;

• the forensic computing platform operable for performing the following steps:
• receiving from an authorized system administrator a configuration setting that establishes a criteria by which the forensic computing platform operates;
• receiving from a first endpoint a meta log associated with a file and containing one or more of a file name, a data classification, a data element tag, a date created or modified, a user name, and an endpoint ID;
• storing the meta log in the cloud control server meta database;
• receiving from a second endpoint a header record comprising data including one or more of a date, a time, a file name, and an IP address of the second end point;
• storing the data from the header record in the cloud control server meta database;
• analyzing the data based on the configured setting and criteria;
• alerting the authorized system administrator based on a result of the analysis;
• and
• reporting the result of the analysis to the authorized system administrator.