The Mail app is native to the users machine, although an increasing number of people are moving to Microsoft's cloud-based service instead, which as discussed in the previous section presents certain forensic challenges.

Basic information, such as contacts with whom the user frequently interacts, is stored in the UsersUsernameAppDataLocalComms folder so that it can be easily recalled when the user wants to send a new message. Luckily, this also makes it available for forensic investigation!