A third party would like to submit to Law Enforcement a hotmail email, what is the best way to capture the header information and ip address that the email originated from and preserving all the attributes of the email?
We currently do not have the third party computer or email, the third party would like to voluntarily provide us with the email.
Open the desired email in Windows Live Hotmail.
Click the down arrow next to Reply in the message's header area near the sender and subject.
Pick View message source from the menu.
Print the resulting window.
Thanks Beetle, but the issues is the third party uses a web browser to view the email and I dont want to have to explain to him how to set-up windows mail. If he were to forward the email how much header info would we lose?
Oops sorry Beetle, I spoke to soon….I figured out what you said in your reply…thanks
If he were to forward the email how much header info would we lose?
You lose all the message routing info, which can be useful in tracking the source.
Using
Then create an image of the local PST.
Erm… maybe I'm missing something important, but… why not just right-click on a message in their Hotmail account (right in the Web browser), then select "View message source", and then print out the output?
Erm… maybe I'm missing something important, but… why not just right-click on a message in their Hotmail account (right in the Web browser), then select "View message source", and then print out the output?
That's pretty much what I said. This doesn't need to be complicated if all your doing is gathering intel.
I doubt you could use anything as evidence under the circumstances described as you can't establish the provenance of the email ( could be a set up by the informant using a dummy account to frame somebody - just saying….).