±Forensic Focus Partners

±Your Account


Nickname
Password


Forgotten password/username?


Membership:
New Today: 4
New Yesterday: 7
Overall: 27513
Visitors: 56

±Follow Forensic Focus

Join our LinkedIn group

Subscribe to news

Subscribe to forums

Subscribe to blog

Subscribe to tweets

Email using hotmail

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Go to page 1, 2  Next 
  

Email using hotmail

Post Posted: Thu Nov 22, 2012 7:14 pm

A third party would like to submit to Law Enforcement a hotmail email, what is the best way to capture the header information and ip address that the email originated from and preserving all the attributes of the email?

We currently do not have the third party computer or email, the third party would like to voluntarily provide us with the email.  

DTaky
Newbie
 
 
  

Re: Email using hotmail

Post Posted: Thu Nov 22, 2012 9:23 pm

Open the desired email in Windows Live Hotmail.
Click the down arrow next to Reply in the message's header area near the sender and subject.
Pick View message source from the menu.
Print the resulting window.  

Beetle
Senior Member
 
 
  

Re: Email using hotmail

Post Posted: Fri Nov 23, 2012 5:18 am

Thanks Beetle, but the issues is the third party uses a web browser to view the email and I dont want to have to explain to him how to set-up windows mail. If he were to forward the email how much header info would we lose?  

DTaky
Newbie
 
 
  

Re: Email using hotmail

Post Posted: Fri Nov 23, 2012 5:21 am

Oops sorry Beetle, I spoke to soon....I figured out what you said in your reply...thanks  

DTaky
Newbie
 
 
  

Re: Email using hotmail

Post Posted: Fri Nov 23, 2012 9:42 am

- DTaky
If he were to forward the email how much header info would we lose?


You lose all the message routing info, which can be useful in tracking the source.
_________________
Tony Patrick, B. Inf Tech, CFCE
www.patrickcomputerfor...s.com/blog
www.twitter.com/Patrick4n6 

Patrick4n6
Senior Member
 
 
  

Re: Email using hotmail

Post Posted: Fri Nov 23, 2012 10:52 am

Using Outlook Hotmail Connector connect to the hotmail account.

Then create an image of the local PST.  

thall
Senior Member
 
 
  

Re: Email using hotmail

Post Posted: Mon Nov 26, 2012 3:38 am

Erm... maybe I'm missing something important, but... why not just right-click on a message in their Hotmail account (right in the Web browser), then select "View message source", and then print out the output?
_________________
Digital Evidence Extraction Software
belkasoft.com 

Belkasoft
Senior Member
 
 
Reply to topicReply to topic

Share this forum topic to encourage more replies



Page 1 of 2
Go to page 1, 2  Next