Student Solution

-->

"Education is the most powerful weapon which you can use to change the world”
– Nelson Mandela

1 University

1 Course

1 Subject

Module 5 Post-Assessment

Module 5 Post-Assessment

Q In your last assignment for this week, address the following questions in 2-3 full paragraphs, integrating the knowledge you have gained during this week: Find a spam or phishing email in your email account. Analyze the condensed and full email header fields? Take snap snap shot so we can see both. What did you observe? Which header fields were included in the chosen email that were not covered in this module? What forensic value do they hold, in any?

View Related Questions

Solution Preview

Email headers provide the necessary information about the senders or originating source. There can be various MTAs (Mail Transfer Agents) or intermediary email servers to rely on the message. The most important email headers contain “received, Authentication-Results, DKIM-Signature, From and Message-ID”. The following screenshot contains the message header of a scam or marketing email. The header values are defined inside the RFC and they cannot be changed. Although, the email services holders are able to modify the header in blue colors. These headers are also known as options headers represent by “x-“.