Sample Technology Paper on Email Forensics

The Concept of Information Stores

An information store is like a store that is used to store a history of data and information. The assumption, in this digital age, is that data can be converted to softcopy and stored on a digital platform. Typically, the information is comprised of messages sent and received, address books, and calendars (Graves, 2014). The client stores this type of information in a specific format, such as audio, video, text, or any other form.

Understanding Ways Clients Store Messaging Information is Stored Critical to the Success of an Email Search?

Email messaging is one of the day-to-day modes of communication in the contemporary world of internet connectivity. Friends and families and professors and students communicate via emails. One can also send out job applications via mail (Graves, 2014). Within the business realm, marketers, in small and large firms, also utilise emails for promotions and advertisements to augment their revenues.

Typically, emails are stored in the cloud and can be in thousands depending on how often they are used. Unless the user deleted an email, sifting through the large stack of messages can be an arduous task, especially if one is trying to find a particular email (Graves, 2014). For that reason, knowledge of the way different clients store their messages simplifies the search process.

Usually, clients store messaging information using varying structures, protocols, locally or on the web, and employ distinct MIME header information when communicating (Graves, 2014). One can examine the email structure. In this case, plain text emails do not support graphics while HTML does and have embedded content. Besides, identifying Email Protocols (Mailbox protocols and Transport protocols) can enhance the search outcomes (Graves, 2014). Further, determining the email client will establish several factors such as the way information is archived on the system, whether the client is local or web-based, and how essential functions, such as sending and receiving messages, are performed (Graves, 2014). Lastly, MIME header information contains the time/date stamps for email exchanges, the server information, message ID (unique), software version used, IDs of carbon copy recipients, and the return path (Graves, 2014). MIME header information critical to the success of an email search.




Graves, W. M. (2014). Chapter 10: Email Forensics. [PowerPoint Slides].