A recent post by Doug Austin of CloudNine discusses the various email addresses that one person can have and what that means when performing a search for emails sent and received by a person. We often find that clients are interested in seeing the emails that an employee or ex-employee has sent or received. In a collection of email, it is quite possible to gather thousands upon thousands of emails. Running searches across the collected data set to pull specific information of interest can generate some interesting results depending on the provided search criteria and terms. Austin mentions in the post that he can receive emails from at least three email addresses, not to mention the use of any personal email accounts that may have been used to send or receive emails.
It is important to pinpoint all variations of a certain email address when using an eDiscovery tool or performing a digital forensic examination.
Email: firstname.lastname@example.org Phone: 703.359.0700
Digital Forensics/Cybersecurity/Information Technology