Cloud Computing is a technology that uses the internet and virtual remote servers to maintain data and applications. Cloud computing allows consumers and organizations to use applications without installation and access their personal files at anytime and anywhere through internet access. It provides people the way to share distributed resources and services that belong to different organizations. Rapid growth in the field of cloud computing also increases severe security concerns due to distributed environment. When any unauthorized person tampers the data in database over cloud then data theft occurs. Such kind of fraud must be detected and necessary steps must be taken. In this paper we propose forensic algorithm to detect when tampering occurred and what data is tampered in the cloud database and propose method that gives more feasible solution.