People tend to write things in email that they would never consider writing in a memorandum or letter. They believe that e-mail is transient and temporary when, in fact, it can be around for eternity in the records of Government agencies and libraries. Email is often backed up on tapes that are generally kept for months or years.
When e-mail is send from John's computer using his mail account:
This email address is being protected from spambots. You need JavaScript enabled to view it. and it is read on Jane's computer using her email account:
This email address is being protected from spambots. You need JavaScript enabled to view it. the e-mail has been stored, even if just temporarily, on at least 4 machines:
- John's office computer where the e-mail was drafted
- the his email system.com's computer system
- the shehasemail.org email system
and finally:
- Janes home computer system where she read the e-mail.
It would not be unusual for it to be stored on more machines than listed here.
As a result, the text and data contained in the e-mail system may well be retrievable from any of these 4 systems, depending upon the timing of the recovery and the use of the systems that would have the e-mail.
Evidence Solutions' experts are skilled at extracting email of all kinds from all kinds of devices.
Email sources include: Exchange, OST, PST, Webmail, Thunderbird, iCloud, Gmail, and more.
Electronic Evidence in PLAIN English.