As a member of WAD (World Association of Detectives), I received the following from a colleague in Australia. Anyone who feels that they might be of assistance, please correspond directly with Mr. Mallard who is not a member of this forum. Thanks!
Fellow members,
I am seeking assistance from a forensic computer expert who can locate the person using a particular Yahoo address. This is a corporate job and one that is causing my client some grief. The sender of the e-mail 'appears' to be from New York and the content of the e-mail is very damaging to my client, their business and defamatory and slanderous.
I require an urgent response from someone competent in this field.
Regards
Warren Mallard
Managing Director
Certificate IV Investigative Services
Advanced Diploma Security Risk Management
Canberra Institute Of Technology
Master Security License No:408273284
Lyonswood Investigations & Security Group
204 Lyons Road, Drummoyne NSW 2047
qwww.investigators.net.au < http://www.investigators.net.au/> ;
( +61 (0) 2 9819-6833 Ê+61 (0) 2 9819-6300
DX 21007 Drummoyne
* warren@investigators.net.au <mailto:warren@investigators.net.au>
I have replied to offer our assiatnce to Mr Mallard.
What happened to just checking the email headers for the "X-Originator" string?
H. Carvey
"Windows Forensics and Incident Recovery"
Sounds like he needs information from Yahoo, the identity of the sender. That's usually 2 court orders deep.
Just got some pre release information on Encase ver. 5 and they are claiming better support for web based email. I'm interested to see how this works. Currently this is a weak point in all automated forensic utilities.