Email forensic Analysis is used to find the actual sender and receiver of an email, date and time it is received and the info about intermediate devices involved in the delivery of the message. The email has become a primary source of communication for organizations and the public. Email is the most common source of phishing attacks. To mitigate these attacks and catch the people responsible, we use email forensics and techniques. These tools analyze the email headers and give the forensic investigator its desired result in no time.