you need to recover when searching a victim computer for a crime committed with specific e-mail mess

What information do you need to recover when searching a victim computer for a crime committed with specific e-mail message?

A.
Internet service provider information

B.
E-mail header

C.
Username and password

D.
Firewall log