ZEKASTRA case pack VP-03 - acquisition log - SYNTHETIC TRAINING DATA
Matter: internal audit request on a payment change, invoice 2026-0412 (synthetic)
Item 1: raw message as stored in the recipient mailbox, saved as message-disputed.eml. Headers and body only; the attachment named in the body was not collected.
Item 2: raw message from the same supplier dated 12 March 2026, saved as message-previous.eml, for comparison.
Item 3: message-trace export of the same mailbox, saved as cloud-export.csv, with its parameters in export-metadata.txt.
Collected by: IT administrator (role only), on the day of the request. The examiner received the copies the same day.
Clock: examiner's workstation, UTC+3. Collection time: 2026-03-16 15:10:00 +03:00.
Handling: the files were copied and were not opened in a mail client. SHA-256 values below were recorded at collection, before examination.

SHA-256 at collection
e18bfac3ec8c4ee1828358c18d5fa9276ce37b4d48eda4368c98decc5abe82c5  export-metadata.txt
bcfa4bdfe7000b88999c8a00a2b3a58e8ba1b84828527fbde5ff115d56301729  cloud-export.csv
45b020315b5c527fbf7cb010deeeef078bc7635cc21afa6a891f68868554647e  message-disputed.eml
e3d675fc4d117cbecf74ab35eb85fda340ef05fb770613f33e89d0199c8802d3  message-previous.eml