• ID: AF027.001
  • Created: 11th August 2025
  • Updated: 27th May 2026
  • Contributor: The ITM Team

Email Deletion

The subject deliberately deletes emails - either sent, received, or both - with the intent to obstruct investigative visibility, remove evidence of policy violations, or eliminate traces of communication relevant to an insider event. While routine inbox maintenance is common, patterns of targeted deletion may indicate purposeful concealment.