Mining writeprints from anonymous e-mails for forensic investigation