# Conversation Index Analysis in Email Forensics — Part 2

**URL:** <https://community.metaspike.com/t/conversation-index-analysis-in-email-forensics-part-2/2721>\
**Category:** Digital Forensics\
**Tags:** email-forensics, blog-posts\
**Created:** [July 31, 2026, 12:57am UTC](https://community.metaspike.com/t/conversation-index-analysis-in-email-forensics-part-2/2721 "2026-07-31T00:57:50Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![agungor](https://community-cdn.metaspike.com/user_avatar/community.metaspike.com/agungor/32/719_2.png) [@agungor](https://community.metaspike.com/u/agungor)\
**Post date:** [July 31, 2026, 12:57am UTC](https://community.metaspike.com/t/conversation-index-analysis-in-email-forensics-part-2/2721/1 "2026-07-31T00:57:51Z")

</div>

Published a new blog on our website to cover “modern” Conversation Indices and go over how we calculate child block timestamps that overflow. You can read it here:

> **[Conversation Index Analysis in Email Forensics — Part 2](https://www.metaspike.com/conversation-index-analysis-email-forensics/)**
>
> Usage of Conversation Index metadata in email forensics and calculation of child block timestamps in modern thread indices that wrap.

Part 2 was 13 years after Part 1. Let’s hope Part 3 will not take so long 😃