Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 327
  • Last Modified:

Can a sent email be modified?

A former business partner is claiming that he sent our firm an email message over a year ago.  While we most likely received email messages from him on that date, we never received the information he claims was in the original email.  He has forwarded the email message to us.  However, we understand that it is fairly easy to modify a forwarded message.  If we had access to his laptop and email, is there a way to authenticate the email message in his sent box?  How easy is it to modify the body of an email message in the sent box?
0
beabea
Asked:
beabea
2 Solutions
 
Deepu ChowdaryCommented:
If you have access to his laptop and email you can see the emails in sent box surely.
You can Modify the body of an email message easily and can forward it to other person, but as you know that it is not possible to save the changes made to email in sent box.
0
 
anjosCommented:
I'd say it's rather easy to modify the tme on the laptop and resend the mail BUT the mail server would have the current date AND you'd we receiving the mail unless he has the mailserver diconnected from the net.

All and all i'd say it's pretty safe to assume if the mail is in the sent box and he's using an email server not on the laptop your can assume it hasn't been modified.
0
 
Alan HardistyCommented:
Email is not a guaranteed form of communication and despite the person sending an email - they cannot guarantee that the recipient received it, unless they ask for a delivery and read receipt, and they get them both.

In terms of modifying a sent email - you can't easily amend anything that is sent - but you could possibly forge a sent email by adjusting the system date / time and sending an email to the relevant recipient, then changing the date / time back again, but it depends on the type / configuration of the email account.

The only way you could prove delivery your end is to revert to a backup of the mailstore from the night in question and then check the message transaction logs, or anti-spam logs.

Either way - I can claim I have sent out a million important emails containing time sensitive info in them, but if they don't arrive, then it's tough.  They will have control over the sending of an email and how it leaves their server, but beyond that, they have absolutely no control and it could have been deleted as spam by anti-spam software, delivered to the Junk Mail folder and been overlooked, then emptied, or accidentally deleted.  As to what happened to it - you will probably never know.
0
Configuration Guide and Best Practices

Read the guide to learn how to orchestrate Data ONTAP, create application-consistent backups and enable fast recovery from NetApp storage snapshots. Version 9.5 also contains performance and scalability enhancements to meet the needs of the largest enterprise environments.

 
Hendrik WieseCommented:
Ask him to send you the email as an Item attachement, as soon as you receive the email do the following:

Assuming that you are using office 2010
1. Double Click to open the email
2. Click on FIle then Options
3. Inspect the Internet Header for the following:
3.1 Time it was sent.
3.2 Which server received the email
3.3 This would show you the exact delivery path etc.

Hope this helps!!!
0
 
beabeaAuthor Commented:
anjos:  He's not using an email server.  So, if the sent email only resides on his laptop, would it be possible to modify the content?
0
 
Alan HardistyCommented:
If it is just a laptop and no Exchange Server is involved, then it would be incredibly easy to forge an email as being sent, but not to modify a sent email.
0
 
beabeaAuthor Commented:
Okay.  So, the email could have been forged in the method that you mentioned above.  Since an exchange serveris not involved, are there other ways that this could have been done?  Can these actions be traced on the laptop?

Thanks for all your help!!!
0
 
Alan HardistyCommented:
Probably not traceable on the laptop unless it was done recently and the logs show the time / date jumping forward / backwards in the current logs on the laptop.

Other than that - can't think of a way to prove it has happened.
0
 
beabeaAuthor Commented:
Thanks for all of your responses!
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now