Solved

Can a sent email be modified?

Posted on 2011-09-26
9
317 Views
Last Modified: 2012-05-12
A former business partner is claiming that he sent our firm an email message over a year ago.  While we most likely received email messages from him on that date, we never received the information he claims was in the original email.  He has forwarded the email message to us.  However, we understand that it is fairly easy to modify a forwarded message.  If we had access to his laptop and email, is there a way to authenticate the email message in his sent box?  How easy is it to modify the body of an email message in the sent box?
0
Comment
Question by:beabea
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
9 Comments
 
LVL 12

Expert Comment

by:Deepu Chowdary
ID: 36601536
If you have access to his laptop and email you can see the emails in sent box surely.
You can Modify the body of an email message easily and can forward it to other person, but as you know that it is not possible to save the changes made to email in sent box.
0
 
LVL 3

Expert Comment

by:anjos
ID: 36601611
I'd say it's rather easy to modify the tme on the laptop and resend the mail BUT the mail server would have the current date AND you'd we receiving the mail unless he has the mailserver diconnected from the net.

All and all i'd say it's pretty safe to assume if the mail is in the sent box and he's using an email server not on the laptop your can assume it hasn't been modified.
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 36601614
Email is not a guaranteed form of communication and despite the person sending an email - they cannot guarantee that the recipient received it, unless they ask for a delivery and read receipt, and they get them both.

In terms of modifying a sent email - you can't easily amend anything that is sent - but you could possibly forge a sent email by adjusting the system date / time and sending an email to the relevant recipient, then changing the date / time back again, but it depends on the type / configuration of the email account.

The only way you could prove delivery your end is to revert to a backup of the mailstore from the night in question and then check the message transaction logs, or anti-spam logs.

Either way - I can claim I have sent out a million important emails containing time sensitive info in them, but if they don't arrive, then it's tough.  They will have control over the sending of an email and how it leaves their server, but beyond that, they have absolutely no control and it could have been deleted as spam by anti-spam software, delivered to the Junk Mail folder and been overlooked, then emptied, or accidentally deleted.  As to what happened to it - you will probably never know.
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 21

Assisted Solution

by:Hendrik Wiese
Hendrik Wiese earned 20 total points
ID: 36601628
Ask him to send you the email as an Item attachement, as soon as you receive the email do the following:

Assuming that you are using office 2010
1. Double Click to open the email
2. Click on FIle then Options
3. Inspect the Internet Header for the following:
3.1 Time it was sent.
3.2 Which server received the email
3.3 This would show you the exact delivery path etc.

Hope this helps!!!
0
 

Author Comment

by:beabea
ID: 36601871
anjos:  He's not using an email server.  So, if the sent email only resides on his laptop, would it be possible to modify the content?
0
 
LVL 76

Accepted Solution

by:
Alan Hardisty earned 30 total points
ID: 36601954
If it is just a laptop and no Exchange Server is involved, then it would be incredibly easy to forge an email as being sent, but not to modify a sent email.
0
 

Author Comment

by:beabea
ID: 36602003
Okay.  So, the email could have been forged in the method that you mentioned above.  Since an exchange serveris not involved, are there other ways that this could have been done?  Can these actions be traced on the laptop?

Thanks for all your help!!!
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 36602017
Probably not traceable on the laptop unless it was done recently and the logs show the time / date jumping forward / backwards in the current logs on the laptop.

Other than that - can't think of a way to prove it has happened.
0
 

Author Closing Comment

by:beabea
ID: 36602081
Thanks for all of your responses!
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many people use more than one email account and so it becomes difficult for them to manage them when they use separate accounts,  so, in this article, I have shared an easy way to add Other Mail Accounts in your Google Inbox. It helps to combine all…
In this step by step procedure, you will come to know the details of creating an Outlook meeting in 2007, 2010, 2013 & 2016.
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
This video discusses moving either the default database or any database to a new volume.

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question