Abstract: A system and method for remediating exposed deleted client data in a cloud computing virtualization is presented. The method includes accessing a disk of a virtualization in a computing environment, the disk including deleted data; recovering at least a file from the deleted data; detecting client data on the at least a file, wherein the client data is untied to any functionality provided by the virtualization; and permanently deleting the detected client data from the disk.

Abstract: A system and method for forensic analysis of block level storage devices for detecting cybersecurity attacks is presented. The method includes accessing a disk in a computing environment, the disk including deleted data; recovering at least a file from the deleted data; initiating a forensic analysis on the at least a file to detect a forensic artifact, wherein the forensic artifact indicates a cybersecurity attack; detecting the forensic artifact on the on the at least a file; and initiating a remediation action on a virtualization associated with the disk based on the detected forensic artifact.