global email forensics | expert witness | smtp

Author: Rob Walton

  • Email Forensics – Court Case Examples

    In the area of email forensics, there are many court cases where digital evidence was required. Waymo vs Uber For this court case, a former Google engineer who worked for Uber, was accused of downloading confidential files and emails from Waymo. Waymo was a company that provided autonomous driving technology. https://jolt.law.harvard.edu/digest/waymo-v-uber-surprise-settlement-five-days-into-trial Uber settled the court…

  • Email SMTP Expert Witness Court Credibility

    For any email SMTP expert witness you are looking to hire, you need to ensure that person is credible, and can stand up to rigorous court cross examination. If the expert witness loses credibility in court, then it makes it very difficult for that legal team to win their court case. SMTP Expert Witness Work…

  • Mail Server Roles

    Any information system used for email purposes can have different sub-functions (roles) within it, depending on its exact role within a particular information system.  Internet standard RFC 5598 provides a clear definition of these roles. https://www.rfc-editor.org/rfc/rfc5598.pdf For example: A conceptual diagram representing this relationship is shown below. The delivery steps between the various stages described…

  • Email Delivery Forensic Log Retention

    Introduction For any successful email forensic investigation, the availability of email logs is a key requirement. Email messages are sent using the Simple Mail Transfer Protocol (SMTP) defined here. As an email is sent and delivered to the recipient, the email will pass through multiple mail gateways. These are known as Message Transfer Agents (MTAs).…

  • Recovery of Deleted Emails

    Expert witness work for email forensics is often concerned with the recovery of emails that have been deleted. A person may send an email, and then delete the email from their Sent Items, and also from their Deleted Items. And then claim they never sent the email. It is possible to investigate this further to…

  • Expert Witness Services for Email and SMTP Protocol

    If you need expert witness services for your court case where email delivery proof is required, then please get in touch. I can provide expert email witness services where email delivery proof is required. Email delivery leaves behind a trail of immutable email delivery logging artefacts. Evidence needs careful examination, and usually an expert witness…