Forensic Friday – Windows 10 Live Mail
Microsoft Windows 10 Live Mail
Email forensics is applicable to a wide range of different case types that you may encounter as an examiner. Email as a communication medium is essential to our lives and thus a vast amount of information gets stored within email archives. This fact coupled with the informal nature of email can often provide the “smoking gun” within a case. During this session we will review the Windows 10 Mail application and the artifacts found on the host system. Attendees will learn of the multiple locations the data will be stored in the user profile and examination techniques to link together these artifacts.