We study the factors that lead to successful experiments in the field of digital evidence tampering, evaluating the studies conducted in the past and the mistakes that happened during the execution of our own experiments. We describe three lessons learned that arise from evaluating the experiments and provide advice on conducting future studies. We also report on qualitative results from our experiments and interviews with professional IT forensic experts.
Digital Forensics Research Conference (DFRWS)
2022-04
2026-06-23