Daily Blog #389: Sunday Funday 6/10/18 - Extended MAPI Challenge

Extended MAPI Challenge by David Cowen - Hacking Exposed Computer Forensics Blog



Hello Reader,
             Another week begins and with it comes a new challenge. You will have a five days to try to complete this challenge now that answers are not due till Friday. Send in your answer as you have it and you are allowed to update your submission if you find new information.

This week we've been talking about Extended MAPI, let's see what you can determine in this week's email related challenge.


The Prize:

$100 Amazon Giftcard

The Rules:

  1. You must post your answer before Friday 6/15/18 7PM CST (GMT -5)
  2. The most complete answer wins
  3. You are allowed to edit your answer after posting
  4. If two answers are too similar for one to win, the one with the earlier posting time wins
  5. Be specific and be thoughtful 
  6. Anonymous entries are allowed, please email them to dcowen@g-cpartners.com. Please state in your email if you would like to be anonymous or not if you win.
  7. In order for an anonymous winner to receive a prize they must give their name to me, but i will not release it in a blog post



The Challenge:

Extended MAPI records metadata around what actions occur against an email message inside of Exchange and Outlook. What within an email message sent from Outlook and connected to an Exchange server would allow an examiner to determine when an email was sent from the system they are examining presuming they found the message in the sent folder within the mailbox.


Also Read: Daily Blog #388

Post a Comment