More and more data is in the cloud. This will only increase. But what is the cloud? Where is the cloud? How do I get there from here? All of these questions lead to a unique problem. How to get the data out of the cloud in an incident response or investigation. The cloud is not any one thing, and neither is how the data is stored or accessed. This talk will address many types of cloud, as well as the myriad of ways that the cloud can be accessed. The bottom line is that it can be done with the proper techniques, information, and legal support.