Enron Email Forensics Lab: Investigating Kenneth Lay’s PST Files in Autopsy

In this digital forensics lab, we walk through how to examine email evidence from the Enron case using Autopsy for Windows and PST mailbox files connected to former Enron CEO Kenneth Lay.

This project focuses on creating a forensic case, adding PST files as logical evidence, allowing Autopsy to process the data, and using keyword searches to identify relevant email content tied to topics such as trade, trading, stocks, and money. It’s a great hands-on exercise for students learning email forensics, keyword analysis, historical case investigation, and how investigators search large message sets for relevant evidence.

This lab also reinforces an important investigation concept: even in major corporate fraud cases, effective keyword strategy and targeted searching can help examiners quickly surface communications of investigative value.

Disclaimer:
This video is for educational purposes only. This lab is based on material from Guide to Computer Forensics and Investigations, 7th Edition — Cengage. The material is used here for instructional and academic discussion. All credit for the original source material belongs to the respective author(s) and publisher. References to the Enron case are included only as part of historical and academic analysis for digital forensics education.

Видео Enron Email Forensics Lab: Investigating Kenneth Lay’s PST Files in Autopsy канала Practical Academy