This artice is free to access.
Legal matters related to unsolicited commercial email often involve several hundred thousand messages. Manual examination and interpretation methods are unable to deal with such large volumes of evidence. Furthermore, as the actors gain experience, it is increasingly difficult to show evidence of spoliation and detect intentional evidence construction. This paper presents improved automated techniques for bulk email analysis and presentation to aid in evidence interpretation.
Cohen, F. (2009). Bulk email forensics. In IFIP Advances in Information and Communication Technology (Vol. 306, pp. 51–67). Springer New York LLC. https://doi.org/10.1007/978-3-642-04155-6_4