Timestamps From Emails
Hello everyone. I am having an issue with timestamps from email attachments sent on an iMac computer.
The issue is someone sent JPEGs using their iCloud email and it is giving very different timestamps. One is stating the date of March 2021 (i.e., for the Created, Modified, and Accessed dates), but our tool parsed out another timestamp called "Email Timestamp Date/Time" and it gives a date of November 2018. Does anyone know why this is occurring? Any help is greatly appreciated.
Disclaimer: the forensic tool that was used was Magnet AXIOM, and my lab no longer has the iMac as it was given back to the investigating officer with the report.