The views expressed in this blog are those of the owner and do not reflect the views or opinions of the owner’s employer. All content provided on this blog is for informational purposes only. The owner of this blog makes no representations as to the accuracy or completeness of any information on this site or found by following any link on this site. The owner will not be liable for any errors or omissions in this information nor for the availability of this information. The owner will not be liable for any losses, injuries, or damages from the display or use of this information. This policy is subject to change at any time. The owner is not an attorney, and nothing posted on this site should be construed as legal advice. Litigation Support Tip of the Night does not provide confirmation that any e-discovery technique or conduct is compliant with legal, regulatory, contractual or ethical requirements.
Featured on the ACEDS blog.
Follow me on Twitter and see How-To Videos on my YouTube channel.
New tips for paralegals and litigation support profesionals are posted to this site each night. Click on the blog headings for better detail.
It's easy to find the header for an email message in Outlook. Follow these steps. (I'm working with Outlook 2016 in this example).
1. With a message open go to File . . . Properties
2. In the Properties dialog box the message's header information will be listed at the bottom.
An email header may make reference to an IP address. A forged email may use an IP address that does not match up with domain listed in the sender's email address. If you get an email from email@example.com which the header indicates came from the IP address 126.96.36.199, you can confirm that the sender is from the edrm.net by checking its IP address with the tracert command in Windows. The IP address is the number listed at the end of the line beginning, 'Tracing route to . . .'
It's also a sign that an email has been forged if it's purports to be from a particular email client but its Mail User Agent format varies from the official pattern.
A list of common MUA header formats can be found here.