Email Headers

One of the first things to learn about emails is that they have headers. The header for an email message tells you a great deal about the email. The standard for email format, including headers, is RFC 2822. It is important that all email uses the same format. That is why you can send an email from Outlook on a Windows 10 PC and the recipient can read it from a Hotmail account on an Android phone that runs Linux. This is because all email programs use the same email format, regardless of what operating system they run on.

Make sure that any email you offer as evidence includes the message, any attachments, and the full email header. The header keeps a record of the message’s journey as it travels through the communications network. ...

Get System Forensics, Investigation, and Response, 3rd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.