Examining Email Usage
In this hands-on lab, you will learn how to gather and analyze evidence from email within the context of a forensic investigation. You will practice examining traces of actions involving email client usage on Windows

Course Content
Upon completing this lab, you should be able to:
- Identify file types that may store email.
- Describe the basic structure of email headers.
- Use automated tools to parse email stored on a system with an email client (Outlook, Thunderbird, etc.).
- Examine stored email for activity of interest.