database securitydisaster recovery
Chapter 10
Email Forensics
1
Email is Often the Best Evidence
Contents can demonstrate intent
Header data can demonstrate the source
Timestamps can show intent to mislead
Show up as evidence in a vast majority of cases
Email Structure
Plain text emails don’t support graphics
HTML structured emails support graphics and embedded content
Attachments can accompany the message as a separate file
Email Technology
Mail user agent is a software interface that represents the end user
Mail transport agent moves messages from point A to point B
Mail client is the application that provides end user support
Mail server handles addressing and transport
Email Addresses
Each user ID must be unique to a particular domain
The same user ID on a different domain may or may not represent the same user
User IDs are easily spoofed with the right software
Email Protocols
Mailbox protocols
Post Office Protocol, ver. 3 (POP3)
Internet Message Access Protocol (IMAP)
Transport protocols
Simple Mail Transport Protocol (SMTP)
Email Clients
Perform some basic functions
Send messages
Receive messages
Manage content (including attachments)
Are operating system specific
Determine how information is archived on the system
May be a local client or web-based
Information Stores
Acts as a cabinet for the information stored by the client
Sent/Received messages
Address books
Calendars
Each client has a specific format for storing data
Email Servers
Act as relay agents for moving messages across the Internet
SMTP servers handle all outgoing messages
IMAP or POP3 servers handle all incoming messages
Server applications such as Microsoft Exchange combine SMTP with POP/IMAP
Standard Header Information
TO:
FROM:
SUBJECT:
DATE:
All of these are easily spoofed
MIME Header Information
Information stored in the header that includes:
Time/Date stamps for various actions along the way
Server information for relay servers along the way
A message ID unique to this message across the Internet
Versions of software used along the way
IDs of blind carbon copy recipients
A return path
Tracing the Origin of a Message
Each server that relays the message adds its IP address
Each relay server maintains logs for a certain period of time that indicates the IP address of the sender as well as the intended recipient
While the time stamp can be manipulated at the origin, the ones added along the way are likely real
Some Email Search Tools
Clearwell
Paraben
GREP
Search Results
False positives – looks right but isn’t
False negatives – doesn’t look right, but is
A measure of accuracy is “precision”
Ratio of false positives to false negatives
A measure of effectiveness is “recall”
Percentage of relevant emails that were found
Advanced Search Methods
Stationary User Profiles – a method of determining if a user makes use of multiple accounts
Similar Users – a way of determining if what appears to be a single user is actually multiple users
Attachment Statistics – a user’s typical behavior regarding attachments is analyzed
Recipient Frequency – what types of messages a specific user usually receives
We provide professional writing services to help you score straight A’s by submitting custom written assignments that mirror your guidelines.
Get result-oriented writing and never worry about grades anymore. We follow the highest quality standards to make sure that you get perfect assignments.
Our writers have experience in dealing with papers of every educational level. You can surely rely on the expertise of our qualified professionals.
Your deadline is our threshold for success and we take it very seriously. We make sure you receive your papers before your predefined time.
Someone from our customer support team is always here to respond to your questions. So, hit us up if you have got any ambiguity or concern.
Sit back and relax while we help you out with writing your papers. We have an ultimate policy for keeping your personal and order-related details a secret.
We assure you that your document will be thoroughly checked for plagiarism and grammatical errors as we use highly authentic and licit sources.
Still reluctant about placing an order? Our 100% Moneyback Guarantee backs you up on rare occasions where you aren’t satisfied with the writing.
You don’t have to wait for an update for hours; you can track the progress of your order any time you want. We share the status after each step.
Although you can leverage our expertise for any writing task, we have a knack for creating flawless papers for the following document types.
Although you can leverage our expertise for any writing task, we have a knack for creating flawless papers for the following document types.
From brainstorming your paper's outline to perfecting its grammar, we perform every step carefully to make your paper worthy of A grade.
Hire your preferred writer anytime. Simply specify if you want your preferred expert to write your paper and we’ll make that happen.
Get an elaborate and authentic grammar check report with your work to have the grammar goodness sealed in your document.
You can purchase this feature if you want our writers to sum up your paper in the form of a concise and well-articulated summary.
You don’t have to worry about plagiarism anymore. Get a plagiarism report to certify the uniqueness of your work.
Join us for the best experience while seeking writing assistance in your college life. A good grade is all you need to boost up your academic excellence and we are all about it.
We create perfect papers according to the guidelines.
We seamlessly edit out errors from your papers.
We thoroughly read your final draft to identify errors.
Work with ultimate peace of mind because we ensure that your academic work is our responsibility and your grades are a top concern for us!
Dedication. Quality. Commitment. Punctuality
Here is what we have achieved so far. These numbers are evidence that we go the extra mile to make your college journey successful.
We have the most intuitive and minimalistic process so that you can easily place an order. Just follow a few steps to unlock success.
We understand your guidelines first before delivering any writing service. You can discuss your writing needs and we will have them evaluated by our dedicated team.
We write your papers in a standardized way. We complete your work in such a way that it turns out to be a perfect description of your guidelines.
We promise you excellent grades and academic excellence that you always longed for. Our writers stay in touch with you via email.