Email content evidence

Record message contents and headers with a timestamp.