Rob Walton is an independent email expert witness and email forensic specialist. With 30+ years professional experience in email systems, email delivery, email SMTP transport, and email fraud.
Email authenticity and forgery | disputed sending or receipt | EML/MSG/PST evidence | email headers | Microsoft 365 and Exchange evidence | Google Workspace | SMTP server logs | Message-ID analysis | SPF/DKIM/DMARC | deleted email | email delivery disputes.
Rob Walton is a highly credible expert witness, and adheres to CPR35, and the Daubert standards.
Rob is a member of the High Technology Cyber Investigation Association (HTCIA). HTCIA is the premier global professional organization providing individuals utilizing investigative techniques and technology with innovative networking and training.
Rob is a member of the International Association of Computer Investigation Specialists (IACIS).
IACIS is an international organization dedicated to digital forensics.
Watch expert email forensics video content on Rob’s dedicated YouTube channel for Global Email Forensics.
Rob Walton is a member of the Expert Witness Institute (EWI). Supporting the proper administration of justice and the early resolution of disputes through high-quality expert evidence from specialists.
Provides credible views on matters of email forensics, based on knowledge and experience of email systems, email delivery and email transport.
Depending onn the evidence, the level of provenance can be determined.
Sometimes, yes. Depends on the available evidence.
As much as possible. Cloud email systems do not always retain message logs. Email messages may be in EML,MSG or PST format.
Yes. Access to Microsoft 365 Tenant is preferred for read-only.
Yes.
Yes.
In my work as an expert witness for email delivery matters, I see many cases where fraud is being alleged. A legal matter often concerns whether an email has been sent, or has been received. Read more
As an expert witness in the email forensics field, I get asked to examine various types of digital evidence. Not all email evidence is equal however. For example, in a recent email expert witness case, Read more
In the area of digital email forensics a common activity is to prove (or disprove) an email is valid. How can an email be proven to be valid, and not a forgery? Forensically, the level Read more