Email Investigations Workshop

HTCIA — Phoenix, AZ

Training materials will be available here during the workshop.

September 21, 2023

Arman Gungor (@armangungor)

SET 1A

Email Appearance

ZIP file containing a PDF that represents email printouts.

SHA-256: 55DF61D0AEE949CD3B226F9E2EC7D535E5054C69448FAEE9E0D30DF6367B3373

DOWNLOAD

SET 1B

Email Metadata

ZIP file containing an email message in MIME format.

SHA-256: 15B01FCB45CB8DD501AFFC0AE5AF2547132812E922784BF241A3A06D666BA252

DOWNLOAD

SET 1C

DKIM Verification

ZIP file containing an email message in MIME format.

SHA-256: 9125F1DB8A1CC207DFDDDFD4C42B5A2A07D625E2E3E2A2E0703006281FA1DA9C

DOWNLOAD

SET 2

Email Body

ZIP file containing an email message in MIME format.

SHA-256: FFB0C47E6738D2C05CACE7C507888174F4B93D59EEA20BDE5893EB602FCB6A00

DOWNLOAD

SET 3

MAPI

ZIP file containing a MAPI container in PST format.

SHA-256: 169D92B78BA077C6897E6432527AF0B7611548EAD4BC9C4789747E814E9A96A5

DOWNLOAD