¡Ya disponible! Análisis Forense de Correos Electrónicos en Office 365

Now available! Forensic Analysis of Emails in Office 365

Juan Antonio Calles

Last Friday, May 16, I officially launched my new book, titled:

📘 "Forensic Analysis of Emails in Office 365"

The date was not chosen at random. I wanted it to coincide with the nearest working day to a very significant day for me: May 17, World Internet Day. An anniversary that celebrates the transformative impact of technology on our society and that, personally, connects me directly with one of the most important moments of my life.

That very day, 12 years ago, my dear friend Ángel Pablo Avilés (Angelucho) presented to the world his book X1Red+Segura. That text not only became a benchmark for digital awareness but also gave rise to a true community, #X1RedMasSegura, dedicated to protecting and educating those with the least knowledge about cybersecurity. Elderly people, families, children, teenagers… all found in Angelucho a close, clear figure devoted to his mission.

This book, dedicated to him, is my small tribute to his legacy. Because if Angelucho taught me anything, it is that knowledge only has value if it is shared, if it reaches those who need it, and if it helps build a safer, more aware, and fairer society.


A book for experts, but also for legal professionals

"Forensic Analysis of Emails in Office 365" is not a typical technical book. Yes, it is rigorous. Yes, it is practical. But its purpose goes beyond technology. This work was born with the intention of building bridges between the technical world and the legal world. Because more and more judges, prosecutors, lawyers, and police forces must face digital evidence without necessarily having a technical background. And also because more and more experts need to develop skills to communicate our findings in a comprehensible, structured, and legally valid way.

The book is structured into 10 chapters totaling about 250 pages, which cover:

  • Theoretical foundations of digital forensic analysis, such as Locard's exchange principle.
  • The chain of custody, hashing, and validation of evidence integrity.
  • Tools such as Microsoft Purview eDiscovery, Outlook, PowerShell, and Microsoft Graph API.
  • Real examples, forensic scenarios, and methodologies applied in professional practice.

Each tool, each methodological step, each legal concept is explained with the intention of being understandable for both technical and legal profiles.


Freely accessible to the entire community

In line with Angelucho's spirit and my own professional philosophy, I have decided to publish this work completely free in digital format. It is available for free download from the Zerolynx website, simply by filling out a short form.

👉 Download the complete book here

Additionally, I will be publishing periodic versions with corrections, your suggestions, and technical updates. One of the first will focus on the renewal of the Microsoft Purview interface, which will coexist with the current one until August.

The official launch of the book took place last Friday within the framework of OSINTOMÁTICO, held from May 15 to 17. Presenting the book at this congress was no coincidence. OSINTOMÁTICO represents the essence of collaborative work, open research, and commitment to continuous training. It was the perfect setting to share this work with colleagues, friends, and professionals who, like me, firmly believe in the value of open knowledge.

But this project would not have been possible without the support of incredible people. Heartfelt thanks to the evaluation committee:

  • Carlos Manuel Fernández-Sánchez
  • Boris Delgado Riss
  • Daniel González
  • Daniel Calzada Parrón
  • Juan Luis García Rambla

And to Miguel Ángel Guergué for the wonderful foreword. Also to my partners and friends Daniel González, Lorenzo Díaz de Apodaca, and Xabier Mitxelena, for their trust and continuous support.


Would you like to collaborate on a paper edition?

I am open to this work being printed and distributed on paper as well (preferably free of charge or at a symbolic cost to cover expenses). If you are part of a association or entity interested in sponsoring a printed edition, don't hesitate to write to me. I will be happy to talk with you to make it possible.

return to blog

Leave a comment

Please note that comments must be approved before they are published.