Is471 Week 6 Assignment

Week 6 Assignment

IS471 Computer Forensics

Grantham University

02 April 2014

1. What is the main piece of information you look for in an email message you are investigating?

The main piece of information you look for in an email message that is being investigated is the originating IP address.

2. Please list 2 formatting standards for email.

Two formatting standards for email are mbox and MIME.

3. When you access your email what type of computer architecture are you using?

When you access your email, you are using client/server architecture.

4. Explain the role of email in investigations.

The role of email investigations is to know how email is processed to collect this essential evidence. In addition, investigators need to know how to examine and interpret the unique content of email messages.

5. Describe client and server roles in email.

You can receive email in two environments: via the Internet or an intranet. In both email environments, messages are distributed from a central server to many connected client computers, a configuration called client/server architecture. The servers run some type of email server program, such as MS Exchange Server. Client computers use an email program such as MS Outlook, to contact the email server and send and retrieve email messages.

6. Explain the use of Email server logs.

Using Email server logs can be very useful in an investigation. Email servers are loaded with software that uses email protocols for its services and maintains logs you can examine and use in your investigation. All email servers can maintain a log of emails that are processed.

References

Nelson, Phillips, Steuart. (2010). Guide to computer forensics and investigation. Chapter 12 ISBN-10: 1-4354-9883-6