During a forensic investigation, you need to reconstruct a user's browsing history from Firefox.
The user is suspected of accessing unauthorized sites, but they have cleared their history. Which artifacts would you examine to retrieve evidence of their browsing activities? (Choose three)

What can be revealed by analyzing the metadata of email attachments?

Which email header field is essential for identifying the server that originally sent an email?

What is a primary focus of forensic analysis when examining emails from a client application?

What is the importance of the 'Last Access Time' timestamp in the context of forensic investigations? (Choose Two)