As enterprises of all sizes continue to shift data into cloud-based content storage and collaboration platforms, the evidence of all kinds of threats both internal and external lives less on hard drives or smartphones, and more on cloud servers. In this lab, learn how to use AXIOM Cloud to recover forensically sound content, metadata, and audit logs using administrative credentials from Microsoft® Office® 365 and Google Suite services. In addition, learn how to use Connections in AXIOM to tie cloud artifacts to computers and smartphones to see the full picture, demonstrate intent, and construct robust timelines for a complete story.