TechForensiq Forensics
Email forensics and mailbox compromise investigations
We analyse headers, mailbox rules, and authentication records to establish whether a mailbox was accessed, spoofed, or manipulated.
Encrypted channel ready
Signs you need this
When organisations call us
- Invoice or payment details changed in an email thread
- Messages disappearing or being auto-forwarded
- Customers receiving mail that appears to come from you
- Suspected mailbox access by a former employee
What you receive
Clear deliverables, no vague promises
- Header and transport path analysis
- Mailbox rule and delegation review
- SPF, DKIM, and DMARC assessment
- Access timeline for the affected mailbox
- Evidence pack for fraud recovery
- Email security hardening plan
How it works
A process built on evidence
- 01
Collect
Original messages and mailbox audit data are preserved.
- 02
Verify
We check authentication results and transport evidence.
- 03
Trace
Access events and rule changes are reconstructed.
- 04
Report
Findings are written for both technical and non-technical readers.
FAQ
Questions we are asked most
Yes, the original message with full headers, not a forwarded copy.
Related
Continue exploring
Need clarity fast?
Whether you're a website owner, product team, or business leader, we'll expertly help you investigate, assess, and secure what matters most.
- 24/7 secure intake
- Confidential and discreet
- Rapid expert response
We respect your privacy. No spam. Ever. Or email support@techforensiq.com