The latest industry news, articles and events
With the prominence of the internet, emails have emerged as the most popular application for business communication, document transfers and transactions from computers and mobile phones. With this emergence, email security protocols have also been implemented to mitigate the illegitimate actions of criminals, such as business email compromise, phishing emails, and ransomware. However, there comes a time when specific emails need to be examined and data extracted for legal matters such as civil litigation and legally aided criminal investigations. This is where email forensics is applied.
Email forensics is the analysis of email and their content to determine the legitimacy, source, date, time, the actual sender, and recipients in a forensically sound manner. The aim of which is to provide admissible digital evidence for use in civil or criminal courts.
Most organisations have specific internal and external email policies in place to help safeguard their data, intellectual property, finances, and reputation. However, this does not always stop individuals (employees for example) violating these policies to the detriment of their employer. These violations can present themselves in the form of forbidden file transfers, data breaches, indecent imagery, and incriminating email threads. Should a company suspect foul play, the application of email forensics to suspected email accounts can provide admissible evidence for disciplinary or legal purposes.
They certainly can and may think that downloading a PST file (personal storage file) will glean all the information they require. However, as technically savvy as they may be, they are not digital forensic professionals. Forensic experts have the correct qualifications, accreditations, and technology to ascertain digital evidence in the most secure, efficient, and cost-effective manner, ensuring that it is court admissible.
They possess expertise that allows them to identify hidden and manipulated email metadata fields, recover deleted files and are knowledgeable of the methods individuals use in an attempt to cover their digital tracks. For someone other than an expert to extract the data in an incorrect manner could jeopardise the integrity of the data, altering the metadata and complicating and legal proceedings.
Email data should always be extracted by digital forensic professionals. This is highly recommended as they do so in a forensically sound manner ensuring that:
As a leading authority in digital forensics, CYFOR has vast experience in email data extraction, data analysis and authentication for criminal and civil legal proceedings. Our team of digital forensic investigators come from a variety of high integrity technical investigative backgrounds including law enforcement, military, academic and cyber security. This combined experience allows CYFOR to provide a leading digital evidence investigative service, backed by a dedicated quality management department that operates to ISO accreditations. This ensures that our clients receive the utmost quality of service and professionalism that is expected while meeting standards that can be relied upon in court.