Forensic Examination and Certification of Email Communications for Active Litigation
Budget: $750 – $1,500 USD
I am seeking a qualified digital forensics examiner to perform an independent forensic examination of native Microsoft Outlook message files (.msg format) and produce a written certification report for use in active arbitration and federal administrative proceedings. The examiner must be available to provide expert testimony at hearing (virtual/remote), if required.
The engagement involves seven .msg files spanning a ten day period: three disputed communications with indicators of third party authorship and four authenticated control specimens from the same sender account establishing the forensic baseline. A separate document produced in static format is the subject of a pending fraud on the tribunal motion involving timestamp impossibilities and content fabrication.
The metadata examination requires extraction and comparative analysis of application of origin indicators (ProgId, Generator tags, MsoNormal class distribution, elementToProof composition markers, MSO prefixed CSS properties, XML/VML/Office namespace declarations), embedded local filesystem paths and clipboard transfer artifacts identifying the composing machine and user profile, SMTP transport headers and MAPI timestamp properties (PR_CLIENT_SUBMIT_TIME, PR_MESSAGE_DELIVERY_TIME, PR_CREATION_TIME), CID referenced MIME attachment analysis and SHA-256 hash comparison of embedded images across all files, and font profile ratios (Aptos versus Calibri) assessed against expected application defaults for the relevant time period.
The content examination requires thread integrity analysis to identify artificial truncation of email chains, signature block rendering comparison documenting visual anomalies correlated to the metadata findings, subject line analysis assessing consistency with purported authorship, and timestamp sequencing analysis for the disputed document to determine whether the claimed transmission time is temporally possible given the content volume and authenticated comparison version.
The deliverable is a written certification report with documented methodology suitable for submission to an American Arbitration Association Commercial Arbitration Tribunal and the U.S. Department of Labor, Office of Administrative Law Judges. I am a pro se litigant.
**Required Qualifications:** Digital forensics certification (EnCE, CCE, GCFE, CFCE, or equivalent), demonstrated experience with MS-CFB structure and Outlook .msg file analysis, familiarity with Microsoft 365/Exchange Online infrastructure, and prior experience providing expert testimony in adversarial proceedings.
**Timing:**All data is available and turnaround time is 10-14 days, or as agreed.
The engagement involves seven .msg files spanning a ten day period: three disputed communications with indicators of third party authorship and four authenticated control specimens from the same sender account establishing the forensic baseline. A separate document produced in static format is the subject of a pending fraud on the tribunal motion involving timestamp impossibilities and content fabrication.
The metadata examination requires extraction and comparative analysis of application of origin indicators (ProgId, Generator tags, MsoNormal class distribution, elementToProof composition markers, MSO prefixed CSS properties, XML/VML/Office namespace declarations), embedded local filesystem paths and clipboard transfer artifacts identifying the composing machine and user profile, SMTP transport headers and MAPI timestamp properties (PR_CLIENT_SUBMIT_TIME, PR_MESSAGE_DELIVERY_TIME, PR_CREATION_TIME), CID referenced MIME attachment analysis and SHA-256 hash comparison of embedded images across all files, and font profile ratios (Aptos versus Calibri) assessed against expected application defaults for the relevant time period.
The content examination requires thread integrity analysis to identify artificial truncation of email chains, signature block rendering comparison documenting visual anomalies correlated to the metadata findings, subject line analysis assessing consistency with purported authorship, and timestamp sequencing analysis for the disputed document to determine whether the claimed transmission time is temporally possible given the content volume and authenticated comparison version.
The deliverable is a written certification report with documented methodology suitable for submission to an American Arbitration Association Commercial Arbitration Tribunal and the U.S. Department of Labor, Office of Administrative Law Judges. I am a pro se litigant.
**Required Qualifications:** Digital forensics certification (EnCE, CCE, GCFE, CFCE, or equivalent), demonstrated experience with MS-CFB structure and Outlook .msg file analysis, familiarity with Microsoft 365/Exchange Online infrastructure, and prior experience providing expert testimony in adversarial proceedings.
**Timing:**All data is available and turnaround time is 10-14 days, or as agreed.
Related categories:
Data Processing
Report Writing
Microsoft Exchange
Microsoft Outlook
Fraud Detection
Digital Forensics