Title: Module 12 Objectives and Activities List
Course: IN 2005 Digital Forensics > Section: Module 12: Chapter 12 -E-mail Investigations

Learning Objectives

By successfully completing this module, the student will be able to:

- Explain the role of e-mail in investigations
- Describe client and server roles in e-mail
- Describe tasks in investigating e-mail crimes and violations
- Explain the use of e-mail server logs
- Describe some available e-mail computer forensics tools

Learning Activities

- Read Chapter 12
- Read Instructor notes

Chapter 12 explains how to trace, recover and analyze e-mail messages by using forensics tools designed for investigating e-mail and general-purpose tools, such as disk editors.  Over the past decade, e-mail has become a primary means of communication, and most computer users have e-mail programs to receive, send and manage e-mail.  These programs differ in how and where they store and track e-mail.  Some are installed separately from the OS and require their own directories and information files on the local computer.  Others take advantage of existing software, such as your Web browser, and install no additional software on the client machine.  Throughout this chapter, you see how e-mail programs on the server interact with e-mail programs on the client and vice versa.  You also learn how to recover deleted e-mail from a client computer, regardless of the e-mail program used and how to trace an e-mail back to the sender.

Assessment Activities

- Complete Discussion 12
- Complete Quiz 12
- Complete Chapter 12: Case Project 12-3 & 12-4
- Work on the MSAT