Daily Blog #404: Exploring Extended Mapi Part 11

Exploring Extended Mapi Part 11 by David Cowen - Hacking Exposed Computer Forensics Blog

Hello Reader,
          In this post I want to follow up on an earlier post questioning what was left behind in a forwarded message extended MAPI wise that would allow an examiner to know more about the message. Well it's appropriate that this is Daily Blog 404 because within the extended MAPI i did not find any of the original dates contained in a property.

I still need to decode the conversation index though and I'll be working on that tomorrow as well as putting all of the logic into python code to automate this process.

This is a 19-part series on Exploring Extended MAPI. You can find the rest of the posts here

Post a Comment