I’ve just scheduled an Email Forensics Workshop. This will be a detailed look at sample messages where we will take it line by line and see what we can glean from message headers, MIME boundary delimiters, DKIM signatures, and more. We will also cover server metadata, forensic preservation strategies, and possibly some methods we haven’t publicly discussed before!
So, you should expect quite a bit of detail rather than a high-level presentation. You can save your spot below:
Also, we might plan an email forensics challenge of sorts later this year 
This workshop will lay the groundwork for some of the concepts and prerequisite investigative techniques. Don’t miss it if email investigations is your thing!