E-mail Analysis and Processing

The use of e-mail in most corporate environments nowadays can provide forensic investigators with a lot of potential evidence. There are specialised tools and techniques that can be used to deal with large volumes of e-mails, allowing investigators to conduct a very comprehensive analysis of the data.

Analysing e-mail processes

These customised tools can remove duplicates like forwarded or copied attachments and messages from an e-mail system. Fuzzy keyword matching techniques are then used to identify certain e-mail messages that could prove to be relevant to the investigation. Employing this kind of system makes sure that all potentially important e-mails can be reviewed by the investigators. This will not only make a better use of investigative resources, it will also assist investigators to adhere to data protection requirements.