Digital forensic examiners are investigators who are experts in gathering, recovering, analyzing, and presenting data evidence from computers and other digital media related to computer-based .They might work on cases concerning identity theft, electronic fraud,investigation of material found in digital devices ,electronic evidence, often in relation to cyber crimes.
Showing posts with label Email Forensics Tools. Show all posts
Showing posts with label Email Forensics Tools. Show all posts
Email Header Analysis tool to trace the origin of an email and gain valuable insights into its journey. Simply paste the email header into the form below to uncover details like the sender’s IP address, mail servers, and email path. If you need help extracting the header,
วันนี้มาแนะนำการแข่งขัน Email Forensics CTF ซึ่งจัดโดยกลุ่ม Metaspike Community!กลุ่มเปิดให้ทุกคนพูดคุยเกี่ยวกับ digital forensicsเข้าร่วมการสนทนาเพื่อแบ่งปันประสบการณ์คำแนะนำและเคล็ดลับและเรียนรู้จากผู้อื่น และมีจัดกิจกรรม Capture The Flag (CTF) โดยกิจกรรมจะเปิดและปิดเป็นช่วง Jan- Feb 2021
Tools recommendations for the CTF
Text Editor
I strongly recommend using a capable text editor. My favorite is UltraEdit. Other good options are Sublime Text or Atom, possibly with some MIME syntax highlighters.
Conversions
I recommend using CyberChef for date and format conversions.
MAPI
When working with MSGs and PSTs, you can use MFCMAPI or OutlookSpy with Outlook.
General Metadata Extraction
You will likely need a general-purpose tool that can extract embedded files, file metadata, etc. Good candidates are X-Ways, Autopsy, or perhaps ExifTool or MetaDiver when you don’t feel like pulling out the big guns.
PDF Deep Dive
When you encounter PDFs, you will likely need a deep dive tool to look into them in detail. You can use PDF CanOpener (with Acrobat), PDF Stream Dumper, pdf-parser.py, etc.
Recover My Email Software recovers deleted email messages and
attachments in all versions of Microsoft Outlook and Outlook Express. It
can also access corrupt Outlook .PST files and corrupt Outlook Express
.DBX files, even if these programs are not installed on the computer.
Source:http://www.recovermyemail.com
2.MailXaminer
Designed from the ground up, as an Email Examination Tool. MailXaminer
supports 20+ email file formats and 750+ MIME types. Thus, leveraging
the examination of 80+ email clients
Source:https://www.mailxaminer.com/
3.eMailTrackerPro
Trace email back to its source and stop spam
Over 97% of all email is
spam. Spam can be harmless but annoying, it can contain viruses or it
can try and trick someone into giving up personal details which in turn
leads to identity fraud. EmailTrackerPro not only offers the ability to trace an email using the email header but it also comes with a spam filter
(advanced edition), which scans each email as it arrives and warns the
user if it's suspected spam. Essentially stopping spam email before it
reaches its intended recipient.
Source:http://www.emailtrackerpro.com
4.Forensic Toolkit (FTK)® | AccessData
FTK provides an intuitive interface for email analysis for forensic professionals. This includes having the ability to parse emails for certain words, header analysis for source IP address, etc. A central feature of FTK, file decryption is arguably the most common use of the software.
Source:https://accessdata.com/
5.Paraben E3:EMX
E3:EMX was designed to be an affordable and comprehensive email
examination tool for local email archives. Paraben has been processing
email since 2002 and has a long history of understanding the issues that
exist with email such as corruption and deleted data recovery. E3:EMX
is the only tool that is priced to be affordable for everyone on a team
processing for forensics or eDiscovery. E3:EMX provides support for over
a dozen email archive types, all with easy-to-use options and automated
deleted data recovery:
Source:https://paraben.com/email-forensics-emx/
6.Stellar Undelete Email for Outlook
Stellar Undelete Email for Outlook is an advanced deleted email recovery software that safely recovers lost or deleted emails from MS Outlook mailbox.'.
Source:https://www.stellarinfo.com
7. Kernel for Outlook PST Repair
Repair corrupted PST files and saves to PST, MBOX, Office 365 and Exchange server
Source:https://www.nucleustechnologies.com
8.Wise Data Recovery
Easily and quickly recover deleted photos, documents, videos, email,
etc. Recover data from local drives, external drive, USB drive, SD card,
mobile phone and other removable devices.
DiskInternals Mail Recovery allows everyone to recover and fix email databases used by Microsoft Outlook, Outlook Express, Windows Mail, Thunderbird and TheBat.
The new version works fully automatically. The tool locates, recovers
and repairs email databases automatically even if the disk is damaged or
inaccessible.
Aid4Mail is a fast, accurate, and easy-to-learn email forensics software
solution. Over the years, it has become an essential tool for computer
forensics and e-discovery professionals around the world.
Source:https://www.aid4mail.com/email-forensics
Email Header Analyzer Tools
12.Email Header Analyzer
This tool will make email headers human readable by parsing them according to RFC 822. Email headers are present on every email you receive via the Internet and can provide valuable diagnostic information like hop delays, anti-spam results and more. If you need help getting copies of your email headers
Source:https://mxtoolbox.com/EmailHeaders.aspx
13.Trace Email (Header Analyzer)
Analyze the email headers and trace the email sender IP location and IP Whois easily.
This plugin will parse .eml or .msg files for email message headers, including x-headers, and will also color IPv4 and IPv6 addresses for ease of readability. Note: requires Sublime Text build 3092 or higher.
