Leveraging DKIM In Email Forensics

25th May 202027th May 2019 by Forensic Focus

by Arman Gungor

My last article was about using the Content-Length header field in email forensics. While the Content-Length header is very useful, it has a couple of major shortcomings:

• Most email messages do not have the Content-Length header field populated
• If the suspect is aware of this data point, the integer value in the Content-Length header field is very easy to modify to make it match the length of the manipulated email payload

Wouldn’t it be great if there was something more widely used and tamper-resistant? Enter DKIM.

Latest Videos

Forensic Focus

Eugene Liscio, founder of ai2-3D, discusses video evidence principles in the context of digital forensic investigations.

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_fGaM--V2n64

Video Evidence Principles With Amped Software #digitalforensics #podcast

Forensic Focus 7th December 2023 4:15 pm

Emma Pickering, Head of Tech and Economic Abuse at Refuge, discusses tech support for survivors of domestic abuse.

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_b6drVsyDLaw

Protecting Victims From Stalkerware And Tech-Enabled Abuse #podcast #digitalforensics

Forensic Focus 7th December 2023 4:10 pm

Eva Galperin, Director of Cybersecurity at the Electronic Frontier Foundation, and Emma Pickering, Head of Tech and Economic Abuse at Refuge discuss the impact of digital forensics and incident response (DFIR) in cases of domestic abuse. They highlight the prevalence of tech-enabled abuse, such as the use of stalkerware, and the need for comprehensive support and safety plans for survivors.

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_PnZ6O0fXZwI

Protecting Victims From Stalkerware And Tech-Enabled Abuse

Forensic Focus 5th December 2023 8:55 pm

Load More... Subscribe

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.