GIAC
GCFE · Question #125
You are investigating suspicious emails sent from a company employee's account. The employee denies sending them. What forensic techniques would you use to investigate the authenticity of these…
The correct answer is A. Analyze SMTP headers C. Extract metadata from email attachments E. Check the user's login timestamps. See the full explanation below for the reasoning.
Question
You are investigating suspicious emails sent from a company employee's account. The employee denies sending them. What forensic techniques would you use to investigate the authenticity of these emails? (Choose three)
Options
- AAnalyze SMTP headers
- BReview network error logs
- CExtract metadata from email attachments
- DExamine email drafts and outbox folders
- ECheck the user's login timestamps
How the community answered
(35 responses)- A71% (25)
- B9% (3)
- D20% (7)
Community Discussion
No community discussion yet for this question.