E-mail logs contain which of the following information to help you in your investigation? (Select up to 4)

The correct answer is A. user account that was used to send the account C. unique message identifier D. contents of the e-mail message E. date and time the message was sent. Email server logs and email headers capture rich metadata and content useful for forensic investigation: (A) User account used to send - the authenticated sender account (SMTP AUTH) is recorded by mail servers, identifying who initiated the message. (C) Unique message…

Submitted by packet_pusher· Apr 18, 2026Network Forensics

Question

Options

Auser account that was used to send the account
Battachments sent with the e-mail message
Cunique message identifier
Dcontents of the e-mail message
Edate and time the message was sent

How the community answered

(54 responses)

A
89% (48)
B
11% (6)

Explanation

Email server logs and email headers capture rich metadata and content useful for forensic investigation: (A) User account used to send - the authenticated sender account (SMTP AUTH) is recorded by mail servers, identifying who initiated the message. (C) Unique message identifier - every email has a globally unique Message-ID header assigned at origination, invaluable for tracking a specific message across mail systems. (D) Contents of the email message - depending on configuration, mail server logs or journaling systems may capture full message body content for compliance and forensic purposes. (E) Date and time - timestamps (sent, received, relayed) are always logged, establishing the timeline of communication. Option B (attachments) is incorrect because standard mail logs record metadata, not binary attachment content - attachment data lives in the message body itself, not in log entries.

Topics

#Email Forensics#Log Analysis#Network Forensics Data#Digital Investigation

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice