Guide
Apple Mail Archives And Email Threading On MacOS
17 pages · 25 min read
- Processing and review
- Email evidence
- Apple and macOS forensics
§ Guide topic
Email evidence
5 practical guides on email evidence for UK litigators, in-house counsel and investigators. Read every page online or download the PDF, free and without registration.
Ref · E-D · 2026 · §TPCClass · ConfidentialJuris · England & WalesStatus · Active
5 practical guides on email evidence, written for UK litigators, in-house counsel and investigators handling disclosure and digital evidence, and every guide can be read in full on its own page or downloaded as a PDF, free and without registration.
§ Questions visitors ask about email evidence
§ 5 guides on email evidence
Ask The Library about Email evidenceGuide
Shared Mailboxes Delegated Access And Who Really Sent The Email
17 pages · 24 min read
This guide addresses the complexities of attributing actions within shared mailboxes and delegated access scenarios, where the 'From' line may name an inbox, not a person.
- Email evidence
Guide
Email Threading
17 pages · 20 min read
This guide, 'Email Threading', is prepared by Computer Forensics Lab for UK lawyers, litigators, in-house counsel and investigators.
- Processing and review
- Email evidence
Guide
Personal Email Accounts In Disclosure
17 pages · 23 min read
This guide addresses the complexities of personal email accounts in disclosure, specifically Gmail, Hotmail, and similar webmail services, when business content is involved.
- Email evidence
Guide
Forensic Collection Of Exchange Online Mailboxes
17 pages · 21 min read
This guide, 'Forensic Collection of Exchange Online Mailboxes', is prepared by Computer Forensics Lab's e-Discovery team for UK lawyers.
- Forensic collection and imaging
- Microsoft 365 evidence
- Email evidence
§ Other topics
- Mobile and messaging evidence (24)
- Forensic collection and imaging (21)
- Electronic disclosure practice (20)
- Apple and macOS forensics (14)
- Deleted data and recovery (13)
- Cloud evidence (10)
- Chain of custody and defensibility (8)
- Servers, NAS and virtual environments (8)
- Custodians and data mapping (7)
- Expert evidence and reports (7)
- Metadata and timestamps (7)
- Open source, web and log evidence (7)
- Encryption and access (6)
- Data theft and exfiltration (5)
Instruct the practice
Bring us in early.
Defensibility is built, not retrofitted.
Whether you are responding to a regulator, preparing for disclosure, or scoping an internal investigation, start the chain of custody with a short, confidential conversation.