A friend of mine has had someone write an email to a client in malice purporting to be my friend. Is there a way to find out who the criminal is using available tools?

scenario

Tom my friend has an email account tom.rafiki@bestservices.not

email used for the offence tom.rafiki@outlook.com

In the email, tom 'the fake' says that he does not want to use his official email so that the corrupt deal is not traced back to him.

The real tom has a hard time trying to prove that this was not him.

My questions

(i) Is it possible for one to get info from outlook on such matters say -date of registration of the email?

(ii) Are there options out there to flash out Tom the fake?

I'm trying to be creative to no avail 

Rgds