Prerequisites

In order to perform the analysis you will need a sandbox VM (Windows or Linux, with a network connection to the internet and capable of reading .msg and .eml files). Ideally, the network used on this VM should be different from your production network. You will also need the original emails to analyze.