killchain-compendium/Forensics/Mail.md

24 lines
430 B
Markdown

# Mail Analysis and Forensics
## Tools
```sh
emlAnalyzer
```
## Outlook
* Outlook files like `.msg` can be read and changed to by perl-email-outlook-message via
```sh
msgconvert *.msg
```
## References
* [Email reputation](https://emailrep.io)
* [Virustotal](https://virustotal.com)
* [Inquest](https://labs.inquest.net)
* [IPinfo](https://ipinfo.io)
* [URLscan](https://urlscan.io)
* [Talos](https://talosintelligence.com)