Email forensics has become a vital part of digital forensic investigations. In this presentation, we will explore subtle marks that email clients leave on email messages as they interact with them and how such marks can be used to obtain crucial timing information, determine how and when an email was modified, and whether it is authentic. In this session, you will learn the following:- How to detect and interpret email client tool marks
- Hidden timestamps related to actions taken on emails
- How to leverage these techniques while investigating large email data sets
SANS DFIR Summit 2023
Speaker: Arman Gungor, CEO, Metaspike
View upcoming Summits:
Музыка
Фильмы
ТВ Шоу
Категории видео
