Our team of digital forensics examiners has the ability to preserve email accounts using industry standard tools and collection methods. Locally stored email is often captured when a preservation of the device it resides on is performed. Local email generally resides in email clients such as Microsoft Outlook or Mac Mail. Another common mail type is webmail (e.g. Gmail and Yahoo), which is generally accessed using a web browser like Google Chrome, Mozilla Firefox or Microsoft Edge. Sensei can remotely collect data from most webmail sources as long as the client can provide us with the username and password to their account(s). In some cases, the client will have to assist us with accessing the account if MultiFactor Authentication (MFA) is enabled.
The forensic analysis of email is something that we perform using industry standard digital forensics software. Email analysis includes tasks like searching for specific messages using criteria, such as keywords, subject titles, attachment types, other email addresses, date and time, and IP address information.
If you have questions about the email collection or analysis process, please contact us at 703.359.0700.
