What information do you need to recover when searching a victim computer for a crime committed with specific e-mail message?What information do you need to recover when searching a victim? computer fo

The correct answer is B. E-mail header. The e-mail header is the critical piece of forensic evidence when investigating a crime involving a specific email. Headers contain the full routing path of the message, including IP addresses of sending servers, timestamps, sender/recipient addresses, and message IDs. This allow

Submitted by priya_blr· Apr 18, 2026Disk Forensics

Question

What information do you need to recover when searching a victim computer for a crime committed with specific e-mail message?What information do you need to recover when searching a victim? computer for a crime committed with specific e-mail message?

Options

AInternet service provider information
BE-mail header
CUsername and password
DFirewall log

How the community answered

(66 responses)

A
6% (4)
B
89% (59)
C
2% (1)
D
3% (2)

Explanation

The e-mail header is the critical piece of forensic evidence when investigating a crime involving a specific email. Headers contain the full routing path of the message, including IP addresses of sending servers, timestamps, sender/recipient addresses, and message IDs. This allows investigators to trace the origin of the email. ISP information (A) may be needed later, but the header is the primary evidence. Username/password (C) and firewall logs (D) are secondary and not specific to tracing a particular email.

Topics

#Email Forensics#Digital Evidence Recovery#Email Header Analysis#Victim Computer Investigation

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice