| Template | email-forensics |
| Case | Mailbox preservation (CASE-EMAIL) |
| FIR | FIR-2026-77 |
| Analyst | Pallavi Pawar |
| Organisation | Innovativa SoftTech |
| SOURCE_DEVICE |
| DeviceName=Microsoft 365 mailbox export |
| DeviceType=Cloud mailbox (PST/EML) |
| DeviceOwnership=Custodian: finance@acme.test |
| SUMMARY files=3 size=163577856 matches=3 mismatches=0 errors=0 |
| ANNEXURE |
| 1. mailbox-1.eml | 53477376 | Verified |
| SHA-256=874e9c3ea2b3c4dda2b3c4e5a2b3c4eda2b3c4f5a2b3c4fda2b3c505a2b3c50d |
| 2. mailbox-2.eml | 54525952 | Verified |
| SHA-256=913213d9a3b4c5dea3b4c5e6a3b4c5eea3b4c5f6a3b4c5fea3b4c606a3b4c60e |
| 3. mailbox-3.eml | 55574528 | Verified |
| SHA-256=9b158b74a4b5c6dfa4b5c6e7a4b5c6efa4b5c6f7a4b5c6ffa4b5c707a4b5c70f |
| VERIFICATION verified=3 failed=0 errors=0 |
| DECLARATION I certify that the email items and associated data described in this certificate were collected and processed with e-Dex, that the cryptographic hash values of the collected items are reproduced in the annexure, and that the verification result stated above reflects, accurately and completely, the integrity of those items as against the recorded values. |