Question

What's the main piece of information you look for in an e-mail message you're investigating?

Answer 1

The main piece of information that an investigator should look in an e-mail message is the originating email domain or IP address to track the suspect to the emails originating location.