Chapter 11 "E-mail and social media investigations", this chapter explains how to trace, recover, and analyze e-mail messages by using forensics tools designed for investigating e-mail and general-purpose tools, such as disk edi-tors. | Guide to Computer Forensics and Investigations Fifth Edition Chapter 11 E-mail and Social Media Investigations Guide to Computer Forensics and Investigations, Fifth Edition Objectives Explain the role of e-mail in investigations Describe client and server roles in e-mail Describe tasks in investigating e-mail crimes and violations Explain the use of e-mail server logs Explain how to approach investigating social media communications Describe some available e-mail forensics tools Guide to Computer Forensics and Investigations, Fifth Edition Exploring the Role of E-mail in Investigations An increase in e-mail scams and fraud attempts with phishing or spoofing Investigators need to know how to examine and interpret the unique content of e-mail messages Phishing e-mails contain links to text on a Web page Attempts to get personal information from reader Pharming - DNS poisoning takes user to a fake site A noteworthy e-mail scam was 419, or the Nigerian Scam Guide to Computer . | Guide to Computer Forensics and Investigations Fifth Edition Chapter 11 E-mail and Social Media Investigations Guide to Computer Forensics and Investigations, Fifth Edition Objectives Explain the role of e-mail in investigations Describe client and server roles in e-mail Describe tasks in investigating e-mail crimes and violations Explain the use of e-mail server logs Explain how to approach investigating social media communications Describe some available e-mail forensics tools Guide to Computer Forensics and Investigations, Fifth Edition Exploring the Role of E-mail in Investigations An increase in e-mail scams and fraud attempts with phishing or spoofing Investigators need to know how to examine and interpret the unique content of e-mail messages Phishing e-mails contain links to text on a Web page Attempts to get personal information from reader Pharming - DNS poisoning takes user to a fake site A noteworthy e-mail scam was 419, or the Nigerian Scam Guide to Computer Forensics and Investigations, Fifth Edition Exploring the Role of E-mail in Investigations Spoofing e-mail can be used to commit fraud Investigators can use the Enhanced/Extended Simple Mail Transfer Protocol (ESMTP) number in the message’s header to check for legitimacy of email Guide to Computer Forensics and Investigations, Fifth Edition Exploring the Roles of the Client and Server in E-mail E-mail can be sent and received in two environments Internet Intranet (an internal network) Client/server architecture Server OS and e-mail software differs from those on the client side Protected accounts Require usernames and passwords Guide to Computer Forensics and Investigations, Fifth Edition Exploring the Roles of the Client and Server in E-mail Guide to Computer Forensics and Investigations, Fifth Edition Exploring the Roles of the Client and Server in E-mail Name conventions Corporate: Public: whatever@ Everything after @ belongs to the .
