Email Record: Methodology for postattack research /