Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Can a sent email be modified?

Posted on 2011-09-26
9
316 Views
Last Modified: 2012-05-12
A former business partner is claiming that he sent our firm an email message over a year ago.  While we most likely received email messages from him on that date, we never received the information he claims was in the original email.  He has forwarded the email message to us.  However, we understand that it is fairly easy to modify a forwarded message.  If we had access to his laptop and email, is there a way to authenticate the email message in his sent box?  How easy is it to modify the body of an email message in the sent box?
0
Comment
Question by:beabea
9 Comments
 
LVL 12

Expert Comment

by:Deepu Chowdary
ID: 36601536
If you have access to his laptop and email you can see the emails in sent box surely.
You can Modify the body of an email message easily and can forward it to other person, but as you know that it is not possible to save the changes made to email in sent box.
0
 
LVL 3

Expert Comment

by:anjos
ID: 36601611
I'd say it's rather easy to modify the tme on the laptop and resend the mail BUT the mail server would have the current date AND you'd we receiving the mail unless he has the mailserver diconnected from the net.

All and all i'd say it's pretty safe to assume if the mail is in the sent box and he's using an email server not on the laptop your can assume it hasn't been modified.
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 36601614
Email is not a guaranteed form of communication and despite the person sending an email - they cannot guarantee that the recipient received it, unless they ask for a delivery and read receipt, and they get them both.

In terms of modifying a sent email - you can't easily amend anything that is sent - but you could possibly forge a sent email by adjusting the system date / time and sending an email to the relevant recipient, then changing the date / time back again, but it depends on the type / configuration of the email account.

The only way you could prove delivery your end is to revert to a backup of the mailstore from the night in question and then check the message transaction logs, or anti-spam logs.

Either way - I can claim I have sent out a million important emails containing time sensitive info in them, but if they don't arrive, then it's tough.  They will have control over the sending of an email and how it leaves their server, but beyond that, they have absolutely no control and it could have been deleted as spam by anti-spam software, delivered to the Junk Mail folder and been overlooked, then emptied, or accidentally deleted.  As to what happened to it - you will probably never know.
0
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 21

Assisted Solution

by:Hendrik Wiese
Hendrik Wiese earned 20 total points
ID: 36601628
Ask him to send you the email as an Item attachement, as soon as you receive the email do the following:

Assuming that you are using office 2010
1. Double Click to open the email
2. Click on FIle then Options
3. Inspect the Internet Header for the following:
3.1 Time it was sent.
3.2 Which server received the email
3.3 This would show you the exact delivery path etc.

Hope this helps!!!
0
 

Author Comment

by:beabea
ID: 36601871
anjos:  He's not using an email server.  So, if the sent email only resides on his laptop, would it be possible to modify the content?
0
 
LVL 76

Accepted Solution

by:
Alan Hardisty earned 30 total points
ID: 36601954
If it is just a laptop and no Exchange Server is involved, then it would be incredibly easy to forge an email as being sent, but not to modify a sent email.
0
 

Author Comment

by:beabea
ID: 36602003
Okay.  So, the email could have been forged in the method that you mentioned above.  Since an exchange serveris not involved, are there other ways that this could have been done?  Can these actions be traced on the laptop?

Thanks for all your help!!!
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 36602017
Probably not traceable on the laptop unless it was done recently and the logs show the time / date jumping forward / backwards in the current logs on the laptop.

Other than that - can't think of a way to prove it has happened.
0
 

Author Closing Comment

by:beabea
ID: 36602081
Thanks for all of your responses!
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
Read this checklist to learn more about the 15 things you should never include in an email signature.
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…

860 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question