Leveraging Server Metadata in Forensic Email Investigations

No ratings

Presented at TechnoSecurity&DigitalForensics 2019 by

Arman Gungor

Contents of emails can easily be altered. Focusing solely on email contents and metadata can prevent you from seeing the whole picture. How can you effectively corroborate information found in emails and detect anomalies? Using metadata servers have about emails. In this session attendees will learn; What types of metadata servers keep about emails; How to retrieve and forensically preserve server metadata; and How you can incorporate server metadata into your forensic email investigations.