# VM for Email Forensics

**URL:** <https://community.metaspike.com/t/vm-for-email-forensics/618>\
**Category:** Digital Forensics\
**Created:** [March 1, 2021, 1:18pm UTC](https://community.metaspike.com/t/vm-for-email-forensics/618 "2021-03-01T13:18:24Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ryan\_Ng](https://community-cdn.metaspike.com/user_avatar/community.metaspike.com/ryan_ng/32/182_2.png) [@Ryan\_Ng](https://community.metaspike.com/u/Ryan_Ng)\
**Post date:** [March 1, 2021, 1:18pm UTC](https://community.metaspike.com/t/vm-for-email-forensics/618/1 "2021-03-01T13:18:24Z")

</div>

Are there any VM that you recommend that has the appropriate tools to analyze malicious emails? (anyone or @agungor) I have some experience with SANS SIFT and REMnux. Thanks!

---

<div class="post-metadata">

**Author:** ![Ryan\_Ng](https://community-cdn.metaspike.com/user_avatar/community.metaspike.com/ryan_ng/32/182_2.png) [@Ryan\_Ng](https://community.metaspike.com/u/Ryan_Ng)\
**Post date:** [March 4, 2021, 7:56am UTC](https://community.metaspike.com/t/vm-for-email-forensics/618/2 "2021-03-04T07:56:58Z")

</div>

@agungor any suggestions? Thanks in advance

---

<div class="post-metadata">

**Author:** ![agungor](https://community-cdn.metaspike.com/user_avatar/community.metaspike.com/agungor/32/719_2.png) [@agungor](https://community.metaspike.com/u/agungor)\
**Post date:** [March 4, 2021, 8:19pm UTC](https://community.metaspike.com/t/vm-for-email-forensics/618/3 "2021-03-04T20:19:07Z")

</div>

Hi there,

I’m afraid I do not have any VM recommendations for email forensics at the moment. We will announce a new tool in this area soon, but it will be a standalone tool rather than a VM.

---

<div class="post-metadata">

**Author:** ![Ryan\_Ng](https://community-cdn.metaspike.com/user_avatar/community.metaspike.com/ryan_ng/32/182_2.png) [@Ryan\_Ng](https://community.metaspike.com/u/Ryan_Ng)\
**Post date:** [March 5, 2021, 1:33pm UTC](https://community.metaspike.com/t/vm-for-email-forensics/618/4 "2021-03-05T13:33:12Z")

</div>

@agungor, Alright thanks! Is there a list of tools you recommend installing on a VM? (Haven’t really had time to go through the replays of the CTF so might have missed it if you mentioned it there). Thanks once again!

---

<div class="post-metadata">

**Author:** ![agungor](https://community-cdn.metaspike.com/user_avatar/community.metaspike.com/agungor/32/719_2.png) [@agungor](https://community.metaspike.com/u/agungor)\
**Post date:** [March 5, 2021, 6:26pm UTC](https://community.metaspike.com/t/vm-for-email-forensics/618/5 "2021-03-05T18:26:24Z")

</div>

Sure! We had posted some tool recommendations for the CTF. I’ve just added a few more.

[Tool Recommendations for Email CTF - Education and Training - Metaspike Community](https://community.metaspike.com/t/tool-recommendations-for-email-ctf/536)

---

<div class="post-metadata">

**Author:** ![Ryan\_Ng](https://community-cdn.metaspike.com/user_avatar/community.metaspike.com/ryan_ng/32/182_2.png) [@Ryan\_Ng](https://community.metaspike.com/u/Ryan_Ng)\
**Post date:** [March 6, 2021, 1:40am UTC](https://community.metaspike.com/t/vm-for-email-forensics/618/6 "2021-03-06T01:40:54Z")

</div>

Alright thanks @agungor!