EC-Council: Computer Hacking Forensic Investigator(CHFI-V10) |
||||
Module 13 : Investigating Email Crimes |
||||
Notes available : 7 |
You are not logged in. Please Login for track your learning progress |
|||
Bookmark this Note
Note ID: 157
Acquiring Email Data from Desktop-based Email Clients
If you want to share the link of this note, please click here to "Copy note link" and share that generated link. Link from URL may change in future.
•When an email crime is suspected to have occurred on a user’s machine using email clients, the key sources of evidence are the local folders and archived files stored by these programs that hold information regarding all emailactivities
•Forensic investigators need to locate the local folders and recover the email messages using the right forensic tools for furtherexamination
•While acquiring email data from the local archives, investigators must be careful to gather all the files as local archives can be spilt into multiple files that store data separately.
![]() |
Go to notes | ![]() |