If a keyword search is done from the filter bar, what parts of the email are searched?

When a keyword search is performed using the filter bar in an email analysis context, it scans all parts of the email for the specified keywords. This includes not just the subject line, but also the body of the email, any included attachments, and other metadata associated with the email.

This comprehensive search allows investigators to find relevant information that may be crucial for their analysis, regardless of where the keyword might appear. Searching only specific parts, like just the subject line or the body, would significantly limit the effectiveness of the search and potentially overlook important evidence contained in other sections or in attachments. This capability to search across all parts of the email enhances the thoroughness and effectiveness of the forensic examination process.