Session Schedule

Loading Events

« All Events

  • This event has passed.
Sep 30

Session: Forensic Investigation of Emails Altered on The Server

September 30 @ 2:00 pm - 3:00 pm EDT

Presented By: Arman Gungor



Emails on a cloud email server are often just as vulnerable to tampering as local messages. With a few clicks, an end-user can replace the original message on the email server with an altered copy. What can investigators do to detect red flags and authenticate messages acquired from servers?

In this session, the presenter will discuss what data points you need to collect from an email server to authenticate emails, why you should consider preserving emails from multiple sources, and how you can be more confident in your findings by combining server metadata with the information found within the message.


September 30
2:00 pm - 3:00 pm EDT