Conversation Index Analysis in Email Forensics — Part 2

Published a new blog on our website to cover “modern” Conversation Indices and go over how we calculate child block timestamps that overflow. You can read it here:

Part 2 was 13 years after Part 1. Let’s hope Part 3 will not take so long :smiley: