Skip to content

Glossary: Logs and Data Sources for Investigations

Authentication-Results

An email header added by a mail server that checks SPF, DKIM and DMARC. It records each result, such as spf=pass dkim=fail dmarc=fail.

Where the book teaches it

Related terms

SPF (Sender Policy Framework)DKIM (DomainKeys Identified Mail)DMARCEmail headers