Email Investigations

Training

Training materials will be available here during the workshop.

May 20-21 2025

Arman Gungor (@armangungor)

SET 1A

Email Appearance

ZIP file containing a PDF that represents email printouts.

SHA-256: 13E40F70607C0B0D7160927D3A44B984378163B825885FD0E635195A48A12D55

DOWNLOAD

SET 1B

Email Metadata

ZIP file containing an email message in MIME format.

SHA-256: 8C71A9B96C8CE82FAF00569DD86037E57D8A322793C09F790021DCA196E8B01E

DOWNLOAD

SET 2

DKIM Verification

ZIP file containing an email message in MIME format.

SHA-256: 9125F1DB8A1CC207DFDDDFD4C42B5A2A07D625E2E3E2A2E0703006281FA1DA9C

DOWNLOAD

SET 3

Email Body

ZIP file containing an email message in MIME format.

SHA-256: FFB0C47E6738D2C05CACE7C507888174F4B93D59EEA20BDE5893EB602FCB6A00

DOWNLOAD

SET 4

MAPI

ZIP file containing a MAPI container in PST format.

SHA-256: 169D92B78BA077C6897E6432527AF0B7611548EAD4BC9C4789747E814E9A96A5

DOWNLOAD