{"id":1030,"date":"2022-10-27T02:23:00","date_gmt":"2022-10-26T20:53:00","guid":{"rendered":"https:\/\/www.mailxaminer.com\/blog\/?p=1030"},"modified":"2022-10-28T15:03:39","modified_gmt":"2022-10-28T09:33:39","slug":"dreammail-forensics-technique-for-email-investigation","status":"publish","type":"post","link":"https:\/\/www.mailxaminer.com\/blog\/dreammail-forensics-technique-for-email-investigation\/","title":{"rendered":"DreamMail Forensics \u2013 Proven Tactics for Email Investigation"},"content":{"rendered":"

Wondering to know the perfect solution to perform DreamMail forensics? Then, check out this blog to know the finest solution to easily perform forensic analysis of DreamMail files.<\/em><\/p>\n

DreamMail is an email client, from the DreamSoftware Studio company. It’s purpose is to be capable of managing multiple email accounts. It supports protocols like SMTP, POP3, eSMTP, and SSL.<\/p>\n

\"DreamMail

Figure 1: DreamMail Email Client<\/strong><\/p><\/div>\n

There are several advanced features such as spam filtration for files with a malware infection, and message rules in managed list of whitelists and blacklists. It has also compressing feature which allow you to compress email data to save space in the hard disk drive.<\/p>\n

DreamMail is loaded with many other features in which it auto-searches POP3 and SMTP servers for connectivity. You can also create short notes, edit received message and send message anonymously using DreamMail.<\/p>\n

DreamMail come up with bulk set of features that lets users to backup emails and contacts in DMD file format. It allows to export emails in multiple file formats EML, HTML, Text and MHT. It also allows to import the emails from EML file, DMD file and Outlook Express Account.<\/p>\n

How to Examine DreamMail Emails for Forensic Purpose?<\/strong><\/h2>\n

There has been an increase in the number of cybercrime cases wherein fraudsters make use of DreamMail application to conduct crimes. However, the main question is that how to get access of DreamMail emails for searching potential artefacts. It is really important to find the user data storage location of DreamMail. However, there is no such location to find the user data from DreamMail. Therefore, the investigating officers can make searches in DefaultUser folder from the computer.<\/p>\n

User Data Folder<\/strong><\/h2>\n

Note:<\/strong> Folder location depends on the user who is using DreamMail because it allow users to store data at any location in computer.<\/p>\n

As you can see in the below image, that all files & folders inside DefaultUser folder are displayed. You can see two different files with the name of BlackList.txt and WhiteList.txt. Both files work for spam filtering, all spam related email IDs are listed in BlackList.txt file.<\/p>\n

\"Search

Figure 2: Search User Data<\/strong><\/p><\/div>\n

Investigators have to take DefaultUser folder with all user data for investigation purpose. However, it is not always a good idea to take User data in a folder. As there might be a probability of data corruption in folders. Therefore, it is suggested to store data into a TAR file and then take it into any removable device for investigation.<\/p>\n

\"User

Figure 3: User Data Folder<\/strong><\/p><\/div>\n

Suggested Tip:<\/strong><\/h3>\n

MailXaminer Email Examiner Software<\/a><\/strong> is a one-stop solution to examine and analyze suspected email data files effortlessly. The software offers some advanced features that allow investigators to analyze files from 20+ email file formats. Besides this, it provides multiple advanced features such analytics option, which includes link analysis, timeline analysis, word cloud and entity analysis.<\/p>\n

Some Remarkable Features by MailXaminer Software<\/strong><\/h3>\n

Here are some additional features of the futuristic email examination software.<\/p>\n