Q47 · Email detect 7

← Question library

Preserved graph release · 0.20260206e

Is there evidence that mailbox message and collaboration activity was observed in process ancestry during the investigation timeframe?

Question ID

Q47

Category

Email

Archetype

detect

Declared entry point

No

The wording and classification above are preserved from this release. It does not contain assessment criteria, applicability rules, investigation-specific context, or evidence for this question. Those must not be inferred from the graph alone.

Recorded outgoing routes

• yes
  Q126 · Have investigators confirmed that mailbox message and collaboration activity in data access traces is authentic telemetry?

  Route ID: Q47-yes-Q126

• no
  Q240 · Have scope boundaries for endpoint execution and persistence activity in process ancestry been expanded to include connected evidence?

  Route ID: Q47-no-Q240

• unknown
  Q49 · Is there evidence that file artifact and content activity was observed in control-plane actions during the investigation timeframe?

  Route ID: Q47-unknown-Q49

These links show the graph's published routing. Following a link does not record an assessment or authorize an action.

Cite this exact question

Include the question ID, graph version, and source digest so that later revisions cannot silently change the reference.

TENSOR Framework, graph 0.20260206e, question Q47: “Is there evidence that mailbox message and collaboration activity was observed in process ancestry during the investigation timeframe?” https://tensor-standards.pages.dev/questions/0.20260206e/Q47/

Source SHA-256

dfc3f1a965c01b6f7ade253e426e69abcbad688fab20d9d00065d71c777c010c

Download the exact graph · Pinned repository source

Using this question in the candidate Core

This preserved entry is not a converted Core 0.1.0-draft.1 definition. A reviewed conversion must supply explicit assessment criteria and parameters, preserve the source identity, and document any change in meaning. See the candidate contract and contribution process.