Shashvathi Forensic Lab provides Forensic E-mail Authentication and examination services to assess the technical characteristics, transmission details, and available digital evidence associated with electronic mail. E-mails are widely used in business transactions, financial communications, legal disputes, corporate investigations, and personal correspondence. When an e-mail's authenticity or integrity is questioned, a forensic examination can help assess whether the available technical evidence is consistent with the information presented.
Our examination may include the analysis of e-mail headers, sender and recipient details, timestamps, mail-server routing information, authentication results, and associated attachments, depending on the nature of the case and the availability of the original electronic evidence.
What Is Forensic E-mail Authentication?
Forensic E-mail Authentication involves the technical examination of an electronic mail message to assess its origin-related information, transmission characteristics, and available indicators of integrity or alteration.
The examination may help identify inconsistencies in the displayed sender information, technical routing details, authentication records, or other relevant e-mail properties. The findings are assessed within the limitations of the available evidence and the agreed examination scope.
Scope of Examination
Shashvathi Forensic Lab may undertake the following examination activities, subject to the evidence available and the requirements of the assignment:
- E-mail Header Analysis: Examination of available header fields, including sender and recipient addresses, message ID, timestamps, and routing information.
- SPF, DKIM and DMARC Analysis: Review of available e-mail authentication results to assess domain-level authentication and identify relevant technical indicators.
- Sender and Domain Assessment: Examination of sender-related information, reply-to addresses, and available domain details for inconsistencies.
- Mail Routing Examination: Assessment of recorded mail-server information and transmission timestamps, where available.
- E-mail Integrity Assessment: Examination of available e-mail data for identifiable inconsistencies or indications of modification.
- E-mail Attachment Authentication: Examination of associated files, such as PDF documents, where included within the agreed scope.
- Technical Report Preparation: Documentation of the examination procedures, observations, findings, and relevant limitations.