Can you tell if emails in an Outlook file have been falsified?
December 2, 2006 9:58 PM Subscribe
How can you tell if emails in an Outlook .PST file have been falsified?
posted by mikeand1 to computers & internet (8 answers total)
Suppose somebody sends me an Outlook mailbox (i.e. a .PST file). I want to know whether they falsified an email in that mailbox.
For example: They send me the Outlook mailbox. It contains an email that the mailbox owner received on January 1, 2004. I can see the body of the email, the date received, date sent, the message ID, and so on.
However, how do I know the body of the email has the same text as the email that was originally received? For example, in Outlook, you can edit an email you receive to change the text of it. You can edit it long after you actually received the email to make it look like someone sent you an email saying X, when they really said Y.
Can I tell if an email has been edited in such a fashion just by looking at something in the Outlook mailbox (.PST file)? (For example, in Word I can look at the "Properties" of a Word document and see when it was last saved.)
Or do I need to get logs off their email server or somesuch?