Summary: An Email Forensic Case
An Email Forensic Case
Daniel W. Cavero
American Public University System
Identity theft has ruined the lives of many. It is crucial and necessary to educate more professionals in the computer forensic field to combat this and many other cybercrimes. The following paper will help inform about identity theft and to explain how it can be resolved through digital forensics. What is identity theft? The U.S. Department of Justice defines it as when “someone wrongfully obtains and uses another person 's personal data in some way that involves fraud or deception, typically for economic gain.” There are many ways to do this. One way is when dumpster divers spend time looking through trash in …show more content…
On the non-technological side there are more methods involved, such as dumpster diving, mail theft, social engineering, shoulder surfing, and stealing personal items. It is hard for a digital forensics team to find the suspect in any of those cases, since most of the evidence would not be found on an electronic device. The technological methods are the ones that will be explored more. They would include the following: credit/debit card theft, skimming, pretexting, man-in-the-middle-attack, phishing schemes, vishing, search engine phishing, SMishing, malware based phishing, phishing through spam, and spear …show more content…
Usually this will include email header information which includes the following fields: From, Date, Message ID, and In-Reply To. (Vacca) In this case if investigators go to Microsoft Outlook 2010, they can select File and then Info. Once the Info tab is selected, they can go to properties and see the headers. The internet headers will provide investigators with the IP of the sender, the email server, the date and time, the message ID, and content-type. Finally, investigators want to revise their documentation to make sure they have documented all of our findings from start to finish. Any consultations with the investigators’ legal partners are beneficial too, especially if they want their evidence to be admissible in
Daniel W. Cavero
American Public University System
Identity theft has ruined the lives of many. It is crucial and necessary to educate more professionals in the computer forensic field to combat this and many other cybercrimes. The following paper will help inform about identity theft and to explain how it can be resolved through digital forensics. What is identity theft? The U.S. Department of Justice defines it as when “someone wrongfully obtains and uses another person 's personal data in some way that involves fraud or deception, typically for economic gain.” There are many ways to do this. One way is when dumpster divers spend time looking through trash in …show more content…
On the non-technological side there are more methods involved, such as dumpster diving, mail theft, social engineering, shoulder surfing, and stealing personal items. It is hard for a digital forensics team to find the suspect in any of those cases, since most of the evidence would not be found on an electronic device. The technological methods are the ones that will be explored more. They would include the following: credit/debit card theft, skimming, pretexting, man-in-the-middle-attack, phishing schemes, vishing, search engine phishing, SMishing, malware based phishing, phishing through spam, and spear …show more content…
Usually this will include email header information which includes the following fields: From, Date, Message ID, and In-Reply To. (Vacca) In this case if investigators go to Microsoft Outlook 2010, they can select File and then Info. Once the Info tab is selected, they can go to properties and see the headers. The internet headers will provide investigators with the IP of the sender, the email server, the date and time, the message ID, and content-type. Finally, investigators want to revise their documentation to make sure they have documented all of our findings from start to finish. Any consultations with the investigators’ legal partners are beneficial too, especially if they want their evidence to be admissible in