Date & Time is part of which artifact category?

• A. Email Artifacts
• B. File Artifacts
• C. Web Artifacts
• D. None

Answer: (A)

The concept being tested is how timestamps are tied to the source of data in artifact categories. In digital forensics, emails carry their own built-in metadata, including timestamps, which makes Date and Time a defining part of email artifacts.

Emails include a Date header and various Received lines that record when the message was created, sent, and processed along its delivery path. Those timestamps are essential for reconstructing the timeline of communication. While files have their own time metadata (created, modified, accessed) and browsers/logs have web-related times, the Date and Time information that uniquely identifies an email’s timing belongs to the email artifact category. For example, an email’s Date header provides the exact sending time, which is why Date & Time is best classified as part of email artifacts.